传递SQL列名称作为cursor.execute（）的属性

Question

I want to pass a column name as attribute of the function cursor.execute() with

conn = sqlite3.connect(db)
cursor = conn.cursor()
cursor.execute("INSERT INTO table (?) VALUES (?)", (column, value))

Is that possible?

In the current form I receive the error SyntaxError: invalid syntax

Answer 1

This will work, assuming column is not user defined input.

cursor.execute(
    "INSERT INTO table ({column}) VALUES (?)".format(column=column),
    (value,)
)