如何将参数传递给`pymssql`中的`cursor.execute`？

Question

I am connecting to sql server db via pymssql library. And I am trying to use the method cursor.execute(sql, params) to execute query.

sql = """
            SELECT
                MIN(myDate)
            FROM
                %s
        """

The sql statement is defined above. It simply selects the minimum date value from the table.

when I run below code to pass the parameter:

cursor.execute(sql, 'Daily')

I got this error pymssql.ProgrammingError: (102, b"Incorrect syntax near 'Daily'.DB-Lib error message 20018, severity 15:\\nGeneral SQL Server error: Check messages from the SQL Server\\n") .

I wonder how the parameter should be passed to the sql statement?

After some debugging I found the issue relates to the table name. It looks like I can't put table name in the parameter. The reason I don't want to concentrate the sql string is to avoid sql injection. Is there a way to pass the table name as a parameter?

Answer 1

try this

sql = 'SELECT MIN(myDate) FROM %s'
cursor.execute(sql , ['Daily'])

Answer 2

May be your query is including \\n .

Repalce \\n with space( ' ' )

Try this,

sql = """
            SELECT
                MIN(myDate)
            FROM
                %s
        """
cursor.execute(sql.replace('\n',' '), ('Daily',))