Re: Error in PostgreSQL query with psycopg

[Richard Huxton <dev(at)archonet(dot)com>]

Parthan wrote:
> Hello,
>
> Am not sure whether i can post such a question over here, still the 
> error is in my postgresql query syntax, hence i post it in this mailing 
> list. sorry if am wrong.
>
> I am getting a 'type error' with the following query.
>
> [Code]
>
> Line68:
> query = cursor.execute("""INSERT INTO ConfMain (ConfName, ConfHost,
> ConfStart, ConfEnd, ConfDays, ConfStartTime, ConfEndTime, ConfSize)
> VALUES (\'%s\', \'%s\', \'%%\', \'%%\', %i, \'%%\', \'%%\', %i);""" %
> (conf_name, host_name, start_day, end_day, int(num_days), start_time,
> end_time, aud_size))

Does psycopg not handle quoting for you? Almost all database interfaces 
nowadays support something like:
result = myquery.execute('INSERT INTO foo (anInt,aDate,aText) VALUES 
(?,?,?)', query_parameters);
The interface deals with quoting the "?" based on the type definitions 
in the database.

Trying to quote things yourself is tricky. You'll need to handle 
single-quotes in a string yourself - easy to get it wrong.
--
  Richard Huxton
  Archonet Ltd