-
|
Code: Additional context |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 5 replies
-
|
Do not use placeholders for regular string interpolation. Use Python features instead. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for reply，Your suggestion is to use f"...%(name)s..."？ |
Beta Was this translation helpful? Give feedback.
-
...
table_name = "table_name_%03d" % ((id / 10) % 1000)
sql = f'''SELECT aa, bb, refresh_time FROM {table_name} WHERE id = %s ORDER BY refresh_time DESC'''
...
cursor.execute(sql, (id,))
data = cursor.fetchall() |
Beta Was this translation helpful? Give feedback.
-
|
Thanks, it's not a problem to handle in python. |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
I understand. Thank you for your reply |
Beta Was this translation helpful? Give feedback.
(id / 10) % 1000)never have SQL injection risk.Do not use untrusted input for table name, off course.