python的sqlite如何写更优雅？

Question

Answer 1

你现在这种, 100%会被sql注入.

https://docs.python.org/zh-cn...

https://docs.python.org/zh-cn...

查看以上两个文档
以下是示例, 跟着做就行.

cur.execute("insert into lang values (?, ?)", ("C", 1972))

cur.execute("select * from lang where first_appeared=:year", {"year": 1972})

Answer 2

ORM才是归宿
https://www.sqlalchemy.org/