How to insert into sql query string with a string derived from python list

Question

I have an example SQL query string like this:

query = "select * from myTbl where name in ('apple', 'pear')"

I need to replace ('apple', 'pear') with any python list generated.

How I can insert any list into the SQL query string without hardcoded in. The code below does not work:

myList = ['apple', 'pear']
sList = ','.join(myList)
"select * from myTbl where name in ({})".format(sList)

It gives a query string 'select * from myTbl where name in (apple,pear)' What I need is a query string "select * from myTbl where name in ('apple','pear')"

Dont use format to format the query. Use parametrized queries and supply a tuple of values for your querystring with placeholdeers inside it. — Patrick Artner
– Patrick Artner, Commented Apr 1, 2020 at 20:23

Mureinik · Accepted Answer · 2020-04-01 20:23:33Z

1

You're missing the quotes around each element:

sList = ','.join('\'' + i + '\'' for i in myList)

answered Apr 1, 2020 at 20:23

Mureinik

316k54 gold badges399 silver badges405 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to insert into sql query string with a string derived from python list

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related