Python Fixed | Sqlite3 Tutorial Query
.exit Now, let's connect to the database using Python's sqlite3 module:
# Execute a query with parameters name = 'John Doe' cursor.execute('SELECT * FROM users WHERE name = ?', (name,))
# Fetch all results results = cursor.fetchall() sqlite3 tutorial query python fixed
sqlite3 example.db This will open the sqlite3 shell, where you can execute SQL commands. Let's create a table called users :
# Print the results for row in results: print(row) This will print: 'jane@example.com') To avoid SQL injection attacks
(1, 'John Doe', 'john@example.com') (2, 'Jane Doe', 'jane@example.com') To avoid SQL injection attacks, use parameterized queries. Instead of concatenating user input into your SQL query, pass it as a parameter:
INSERT INTO users (name, email) VALUES ('John Doe', 'john@example.com'); INSERT INTO users (name, email) VALUES ('Jane Doe', 'jane@example.com'); Exit the sqlite3 shell: email) VALUES ('John Doe'
# Execute a query cursor.execute('SELECT * FROM users')