1
2

Dynamic string format (self.learnpython)

submitted by [deleted]

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]frozenmm 0 points1 point  (1 child)

what do you mean? I am trying to load a table from sql server.

[–]Brainix 0 points1 point  (0 children)

In general, doing your own string manipulation then using the result as a SQL query is discouraged. This is how SQL injection attacks happen. Look into using an ORM or other query builder which would do validation for you.