Changes between Version 29 and Version 30 of TracDev/DatabaseApi

Timestamp:

Apr 5, 2014, 1:09:45 PM (10 years ago)

Author:

Jun Omae

Comment:

Revised example to use db.quote()

TracDev/DatabaseApi

@@ -220 +220 @@
 cursor.execute("SELECT author,ipnr,comment FROM wiki WHERE name=%s", [thename])
 cursor.execute("SELECT id FROM ticket WHERE time>=%s AND time<=%s", (start, stop))
-
 }}}
 
@@ -228 +227 @@
 cursor.execute("SELECT author,ipnr,comment FROM wiki WHERE name=?", thename)
 cursor.execute("SELECT id FROM ticket WHERE time>=%i AND time<=%i", start, stop)
-
 }}}
 
@@ -237 +235 @@
 {{{
 #!python
-cursor.execute("SELECT time FROM %s WHERE name=%%s" % table, (thename,))
-
+cursor.execute("SELECT time FROM %s WHERE name=%%s" % db.quote(table), (thename,))
 }}}