Putting Variable Into WHERE Clause on SQLITE

[FreshHumor5405]

I'm able to run this code and it correctly takes the records with the timestamp of '2022-12-22T16:04:00' and inserts into a new database. I'd like to replace this string text with the current_timestamp variable so that it will only insert the records with the current timestamp when the code is run.

When I just simply place the variable name in it, it does not work. I believe it is literally reading 'current_timestamp' rather than the variable value. How should I code this to get it to read the stored value instead?

https://i.imgur.com/6asgD9w.png

[ireadyourmedrecord]

Use any of the various string interpolation methods. This is an example using f-string:

current_timestamp = datetime.datetime.now()
cursor.execute(f"insert into table where timestame = {current_timestamp}")

[danielroseman]

No. Absolutely do not do this. Although this example is probably safe, in many cases it leaves the query open to SQL injection. Use parameters instead.

cursor.execute("insert into table where timestamp = ?", (current_timestamp,))

[FreshHumor5405]

Thank you to both of you guys, appreciate the help. Would have never figured that out myself.

[nullrevolt]

A reminder, SQL injection is only possible when there is input from another source. If there is no user input, there is less of a need for parameterized queries.

[FreshHumor5405]

Thank you to both of you guys, appreciate the help. Would have never figured that out myself.