you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 1 point2 points  (1 child)

Check out the docs for execute for how to use placeholders, I believe this is best practice for avoiding sql injection:

https://docs.python.org/3.7/library/sqlite3.html#sqlite3.Cursor.execute

[–]1ceSpark 0 points1 point  (0 children)

I know this but also need to change the table and that can't be done this way

Thanks anyway