SQLi¹

2022-09-23 Flask - MySQL You have an error in your SQL syntax

('DELETE FROM `farm-users`.users WHERE id = %s' % id)

2022-09-23 Python check if a postgreSQL query succeeds

(((postgres_insert_query + postgres_insert_query2) + postgres_insert_query3) + postgres_insert_query4)

2022-09-22 SQLalchemy text() query with multpile JOINS over 6 tables not returning any rows

f'''
        create view RECEIPT as 
            SELECT 
                `{DATABASE_CONFIG['database']}`.`EKBE`.`BELNR` AS `BELNR`,
                `{DATABASE_CONFIG['database']}`.`EKBE`.`BUZEI` AS `BUZEI`,
                `{DATABASE_CONFIG['database']}`.`EKPO`.`EBELN` AS `EBELN`,
                `{DATABASE_CONFIG['database']}`.`EKPO`.`EBELP` AS `EBELP`,
                `{DATABASE_CONFIG['database']}`.`EKBE`.`MATNR` AS `MATNR`,
                `{DATABASE_CONFIG['database']}`.`EKBE`.`MENGE` AS `EKBE_MENGE`,
                `{DATABASE_CONFIG['database']}`.`EKBE`.`BLDAT` AS `BLDAT`,
                `{DATABASE_CONFIG['database']}`.`EKET`.`SLFDT` AS `SLFDT`,
                `{DATABASE_CONFIG['database']}`.`T001`.`BUKRS` AS `BUKRS`,
                `{DATABASE_CONFIG['database']}`.`T001`.`BUTXT` AS `BUTXT`,
                `{DATABASE_CONFIG['database']}`.`T001W`.`WERKS` AS `WERKS`,
                `{DATABASE_CONFIG['database']}`.`T001W`.`NAME1` AS `NAME1`,
                `{DATABASE_CONFIG['database']}`.`T001W`.`LAND1` AS `LAND1`,
                `{DATABASE_CONFIG['database']}`.`LFA1`.`NAME1` AS `LFA1_NAME1`,
                `{DATABASE_CONFIG['database']}`.`LFA1`.`LAND1` AS `LFA1_LAND1`,
                `{DATABASE_CONFIG['database']}`.`LFA1`.`LIFNR` AS `LIFNR`,
                `{DATABASE_CONFIG['database']}`.`EKPO`.`MENGE` AS `EKPO_MENGE`,
                (`{DATABASE_CONFIG['database']}`.`EKBE`.`BLDAT` > `{DATABASE_CONFIG['database']}`.`EKET`.`SLFDT`) AS `late` 
            FROM `{DATABASE_CONFIG['database']}`.`LFA1` 
                JOIN `{DATABASE_CONFIG['database']}`.`EKKO` 
                JOIN `{DATABASE_CONFIG['database']}`.`EKPO` 
                JOIN `{DATABASE_CONFIG['database']}`.`T001` 
                JOIN `{DATABASE_CONFIG['database']}`.`T001W` 
                JOIN `{DATABASE_CONFIG['database']}`.`EKBE` 
                JOIN `{DATABASE_CONFIG['database']}`.`EKET` 
            WHERE (
                (`{DATABASE_CONFIG['database']}`.`LFA1`.`LIFNR` = `{DATABASE_CONFIG['database']}`.`EKKO`.`LIFNR`)  AND
                (`{DATABASE_CONFIG['database']}`.`EKKO`.`EBELN` = `{DATABASE_CONFIG['database']}`.`EKPO`.`EBELN`)  AND
                (`{DATABASE_CONFIG['database']}`.`EKPO`.`WERKS` = `{DATABASE_CONFIG['database']}`.`T001W`.`WERKS`)  AND
                (`{DATABASE_CONFIG['database']}`.`EKPO`.`EBELN` = `{DATABASE_CONFIG['database']}`.`EKBE`.`EBELN`)  AND
                (`{DATABASE_CONFIG['database']}`.`EKPO`.`EBELN` = `{DATABASE_CONFIG['database']}`.`EKET`.`EBELN`)  AND
                (`{DATABASE_CONFIG['database']}`.`EKPO`.`BUKRS` = `{DATABASE_CONFIG['database']}`.`T001`.`BUKRS`)
            )
        '''

2022-09-21 Pass Argument Through Sql Queries Pandas

('\n                               SELECT\n                               *\n                               FROM %s\n                               ' % table_name)

f'''
                               SELECT
                               *
                               FROM {table_name}
                               '''

2022-09-20 What is the correct path to my database when I deploy heroku?

(' UPDATE users SET %s = %s WHERE id=1;' % (column, value))

2022-09-20 How to insert only new values in SQLite DB from Python and Pandas DF?

f'''
        INSERT OR IGNORE INTO {coin}{col} 
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
    '''

f''' CREATE TABLE IF NOT EXISTS {coin} 
    (
        time                INTEGER NOT NULL,
        high                REAL,
        low                 REAL,
        open                REAL,
        volumefrom          INTEGER,
        volumeto            INTEGER,
        close               REAL,
        conversionType      TEXT,
        conversionSymbol    TEXT,
        date                TEXT
    )'''

2022-09-20 How to select dates in SQLite with python

f'SELECT date, name FROM table WHERE date = {date}'

2022-09-20 F-string formatting in SQLite gives OperationalError: no such column: Using Jupiter Notebook in VSCode

"SELECT * FROM finale WHERE {}='{}'".format(slot_name, slot_value)

2022-09-19 How can I use the values returned from a Python SQLite query as the parameters in a new Python SQLite query?

f'SELECT * FROM {row}'

2022-09-18 DELETE FROM doesn't work in Python for SQL

'DELETE FROM {c} WHERE Close IS NULL;'.format(c=c)

2022-09-16 How to create a table inside a flask application hosted on heroku?

(' SELECT %s FROM table WHERE id=1' % column)

2022-09-15 Mysql doesn't accept my value from QDateEdit

('INSERT INTO` library` (acquired) VALUES (% s) ' % gotit)

2022-09-13 Python Searching SQL Database and Decision Making

"(SELECT Account_Number FROM DATacc WHERE Email_Address = '{email}')".format(email=SQLEmail)

2022-09-13 How to optimize reading millions of rows and plot it in python using sqlite and matplotlib?

f'''SELECT id,{column},MONTH(Date) As Month
                FROM Batch1 
                WHERE (Date between '21-Jun-2022 00:00:00.000000' and '25-Jun-2022 23:50:41.203898')
                ;
      '''

2022-09-12 SQL optimization to increase batch insert using Scrapy

(('INSERT INTO ' + self.table) + '(rowid, date, listing_id, product_id, product_name, price, url) VALUES (%(rowid)s, %(date)s, %(listing_id)s, %(product_id)s, %(product_name)s, %(price)s, %(url)s)')

(('INSERT INTO ' + self.table2) + '(product_rowid, date, listing_id, product_id, product_name, price, url) VALUES (%(rowid)s, %(date)s, %(listing_id)s, %(product_id)s, %(product_name)s, %(price)s, %(url)s)')

2022-09-12 INSERT to MySQL 8.0 Table too slow from Python program, New to python. Appreciate your time

(((((((((('SELECT  ' + key_name) + ' , ') + saved_col_name) + ' , ') + ' rec_cre_dt_utc FROM ') + table_name) + ' where rec_cre_dt_utc >= ') + "'") + date_before_1day.strftime('%Y-%m-%d 00:00:00')) + "'")

(((((((((((((('SELECT  ' + saved_key_name) + ' , ') + saved_col_name) + ' FROM ') + table_name) + ' where rec_cre_dt_utc < ') + "'") + before_date.strftime('%Y-%m-%d 00:00:00')) + "'") + ' and shipment_num = ') + "'") + curr_key) + "'") + ' order by rec_cre_dt_utc desc LIMIT 1')

2022-09-11 Buffered items and bulk insert to Mysql using scrapy

(('INSERT INTO ' + self.table) + '(rowid, date, listing_id, product_id, product_name, price, url) VALUES (%(rowid)s, %(date)s, %(listing_id)s, %(product_id)s, %(product_name)s, %(price)s, %(url)s)')

(('INSERT INTO ' + self.table2) + '(product_rowid, date, listing_id, product_id, product_name, price, url) VALUES (%(rowid)s, %(date)s, %(listing_id)s, %(product_id)s, %(product_name)s, %(price)s, %(url)s)')

2022-09-10 TypeError in MySQL - Python OOP program

f'DELETE FROM productos WHERE id = {id}'

f'INSERT INTO productos VALUES({nombre}, {precio}, {stock})'

f'SELECT * FROM productos WHERE id = {id}'

f'UPDATE TABLE productos SET precio = {precio} WHERE id = {id}'

2022-09-09 CSV headers to MySQL columns automatically using python

f'CREATE TABLE IF NOT EXISTS test_table ({table_config})'

2022-09-09 Python: MySQL is not updating record despite of using Commit

'UPDATE {} set product_status = 3 where shop_url = %s '.format(TABLE_FETCH, shop_url)

2022-09-04 Unable to give MySQL Query using Python

('\n                INSERT INTO %s (sno, nam, class, bloodgrp) VALUE (%s,%s,%s,%s);\n            ' % (table, alpha, nam, clas, bldgrp))

f'''
    SELECT * FROM {table} 
    '''

2022-09-03 pymysql insert on duplicate key update. Problem with tuple on update

((((('INSERT INTO database.table(' + str(str_of_cols)) + ') VALUES (') + str(str_of_vals)) + ') ON DUPLICATE KEY UPDATE ') + str(str_of_updt))

2022-09-03 SQLAlchemy session.execute() return value CursorResult , return row as dict

f'SELECT * FROM mytable WHERE entity_guid IN {entity_guids}'

2022-09-02 n="+".join(n) TypeError: can only join an iterable

('select Course from student where Roll_No=' + str(id))

('select Name from student where Roll_No=' + str(id))

('select Roll_No from student where Roll_No=' + str(id))

('select Semester from student where Roll_No=' + str(id))

2022-08-31 Getting Syntax error in nested SQL query in sqlalchemy

('INSERT INTO temporary (train%s) VALUES ((SELECT (train.%s-ideal.%s)*(train.%s-ideal.%s) FROM train INNER JOIN ideal ON train.x=ideal.x))' % (train_no, col_train, col_ideal, col_train, col_ideal))

('INSERT INTO temporary (train%s) VALUES (SELECT (train.%s-ideal.%s)*(train.%s-ideal.%s) FROM train INNER JOIN ideal ON train.x=ideal.x)' % (train_no, col_train, col_ideal, col_train, col_ideal))

2022-08-31 Doesn't want to introduce value into the table SQL

'CREATE TABLE IF NOT EXISTS {}(chanel INT, active INT)'.format(name)

'INSERT INTO {} VALUES(?, ?)'.format(name)

'SELECT * FROM {} WHERE chanel == ?'.format(name)

'UPDATE {} SET chanel_id == ? WHERE active == ?'.format(name)

2022-08-29 Leading Zeroes on Char column are Not being Persisted (Python + SQL)

f'UPDATE <SQL TABLE> SET [Last Used Number]  = {str(pFinal)}'

f"UPDATE <SQL TABLE> SET [Last Used Number]  = '{pFinal:05d}'"

2022-08-29 SQL code is not comparing variables given by TKinter from within a function

'SELECT Password FROM Login WHERE Username = "{}"'.format(Username.replace('"', '""'))

2022-08-20 sqlite3 parameters of unsupported type

f'''INSERT INTO transactions (amount, description, category)
                            VALUES ({amount}, '{description}', '{category}')'''

2022-07-25 Pandas only support SQL Alchemy connectable

(((('exec ' + strObj) + " '") + str(irow[1])) + "' ")