On Mon, May 7, 2018 at 6:35 AM, Adrian Klaver <adrian.kla...@aklaver.com>
wrote:

>
>>             Not sure but I'm thinking you at least need to add single
>>             quotes around the %s symbols.  That doesn't really explain
>>             the integer input error though I'm not familiar with the
>>             exact features of the execute method in Python.
>>
>
> They do not need to be quoted:
>
> http://initd.org/psycopg/docs/usage.html#passing-parameters-to-sql-queries


​Yeah, upon further reflection overnight I figured it must incorporate
sql-injection prevention.  The use of "%s", which is typically a printf
construct and printf doesn't do that kind of thing, threw me.

David J.

Reply via email to