Python-MySQL语法错误

Question

I tried to make a python command to update mysql on key duplicate

sql.run("INSERT INTO snapshots (id,username,data) VALUES ('%s','%s','%s') ON DUPLICATE KEY UPDATE data = VALUES(%s)" % (id,user.name,json.dumps(data),json.dumps(data)))

It works on data insert but on key duplicate, it throws this error

/usr/local/lib/python2.7/dist-packages/memsql/common/database.py at 166 > (1064, 'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near \\'{"achievements": {"150": 1448983913.491705, "200": 1448984742.809708, "204": 144\\' at line 1')

I have tried KEY UPDATE data = '%s' , KEY UPDATE data = VALUES(%s) and KEY UPDATE data = VALUES('%s') but none of them works.

What exactly did I do wrong here?

Answer 1

错误的根本原因是json转储的字符串中没有转义的"字符，这是由于将数据直接替换为查询而引起的。正如@mgilson所说，请使用cursor.execute()方法，数据库驱动程序将负责转义。