有没有办法在没有值占位符的情况下动态输入SQL查询的值

Question

假设我在Python中有sqlite3查询：

SELECT COUNT(customerid) FROM customerDetails WHERE age BETWEEN 17 AND 24

有没有一种通过用户输入动态输入年龄占位符的方法。

这可以通过 sql 变量来完成吗？它会像这样?..

SELECT COUNT(customerid) FROM customerDetails WHERE age BETWEEN = ? AND = ?

Answer 1

是的。只需使用参数化查询并将占位符的值?s 作为元组传递给execute方法：

min = 10
max = 50
sql = "SELECT COUNT(customerid) FROM customerDetails WHERE age BETWEEN = ? AND = ?"
cursor.execute(sql, (min, max))