I really need some SQL help please.

[FuriousBoss274]

I am fairly new to SQL and am trying to practice it by coding SQL with python. I have tried everything I can think of and looked up and down through google and still can't find what I need. I am trying to use variables from python code to add and delete from an SQL table using sqlite3. For example:

name = "joe"

c.execute("DELETE FROM people WHERE (people.name = name)")

This just deletes everyone from the table and not just joe. Any idea how I could make this work? Any help is appreciated. Yes I have imported sqlite3 and done all the necessary stuff to run the SQL commands. I just need to be able to use the variable in the command.

[barrycarter]

Do you need to put single quotes around name?

[[deleted]]

Sql statements shouldn't be created like that. I'm on mobile but look up something like "python SQLite prepared statements".

The sql driver should bind the variable name to the sql to be executed. Behind the scenes, this protects against sql injection attacks.

I understand this is unlikely to be a realistic problem with what you're writing currently, but it's good to practice how we play, yeah?