如何使用从python列表派生的字符串插入sql查询字符串

Question

I have an example SQL query string like this:

query = "select * from myTbl where name in ('apple', 'pear')"

I need to replace ('apple', 'pear') with any python list generated.

How I can insert any list into the SQL query string without hardcoded in. The code below does not work:

myList = ['apple', 'pear']
sList = ','.join(myList)
"select * from myTbl where name in ({})".format(sList)

It gives a query string 'select * from myTbl where name in (apple,pear)' What I need is a query string "select * from myTbl where name in ('apple','pear')"

Answer 1

您缺少每个元素周围的引号：

sList = ','.join('\'' + i + '\'' for i in myList)