Carsten Haese wrote: > On Fri, 2007-10-12 at 13:12 +0200, Florian Lindner wrote: >> Carsten Haese wrote: >> > sql = "INSERT INTO "+DOMAIN_TABLE+"("+DOMAIN_FIELD+") VALUES (%s)" >> > executeSQL(sql, domainname) >> >> Ok, I understand it and now it works, but why is limitation? Why can't I >> just the string interpolation in any playes and the cursor function >> escapes any strings so that they can't do harm to my query? > [...]
Thanks for your good explanation! Florian -- http://mail.python.org/mailman/listinfo/python-list