Add ' ' to SQL query parameter in Python

Question

How can I convert the account value into a string that my SQL query accepts.

import pandas as pd import os from xlwings import Workbook, Range from sqlalchemy import create_engine account = Range('G2').options(numbers=int).value #account number #value is 3001001000 sql = 'SELECT top 30 oraclenum,pcat,ConLenses, sum(dollars) as dollars FROM ' \ 'ConData WHERE oraclenum = {} group by oraclenum,pcat, ConLenses'.format(account)

How can I include the value between ' '. Kinda like WHERE oraclenum = '3001001000' in my SQL query. It throws an error if its not formatted as a string.

Consider parameterized queries.

Lunaweaver
– Lunaweaver

2016-11-11 20:55:06 +00:00
Commented Nov 11, 2016 at 20:55 — Lunaweaver
– Lunaweaver, Commented Nov 11, 2016 at 20:55

Jean-François Fabre · Accepted Answer · 2016-11-11 20:27:31Z

You could put escaped quotes around your format expression (\'{}\'), though the best way is to swap quotes for double quotes and put simple quotes around your format string

sql = "SELECT top 30 oraclenum,pcat,ConLenses, sum(dollars) as dollars FROM " \ "ConData WHERE oraclenum = '{}' group by oraclenum,pcat, ConLenses".format(account)

You could also use """ (triple quotes) for multi-line strings. See stackoverflow.com/questions/10660435/…
you're right, but in that case, it's just 2 strings on a single line, concatenated and using backslash to avoid creating a too long line.

Collectives™ on Stack Overflow

Add ' ' to SQL query parameter in Python

1 Answer 1

2 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Linked

Related