In article <[EMAIL PROTECTED]>,
 "Bowen" <[EMAIL PROTECTED]> wrote:

>In article <[EMAIL PROTECTED]>, Benjamin Niemann <[EMAIL PROTECTED]> 
>wrote:
>
>>Another side note: don't build your queries using (dumb) string formatting,
>>let the MySQLdb module do it for you.
>
>Thanks for that tip, it's a simple script that I am experimenting on,
>planning to build a custon gui for my database. It is defin[i]tely
>something for me to note in the future.

Best get into the habit of doing careful quoting NOW, not "in the 
future". Otherwise you will inadvertently leave yourself open to an SQL 
injection attack at some point in the future.
-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to