Python“TypeError：'str'对象不可调用”-我没有在代码中使用“str”

Question

I am getting a TypeError: 'str' object is not callable in the following piece of code on the line beginning with "exists":

@app.route('/passwordLoginForm1', methods=['GET','POST'])
def passwordLoginForm1():
    username = request.form['username']
    password = request.form['password']
    exists = db.get_passdetails(username,password)

    if exists == 'true':
            return render_template('pin.html') 
    else:
            return render_template('passwordsLogin2.html')

This is the get_passdetails for reference:

def get_passdetails(username,password):
    cur=conn.cursor()
    cur.execute("SELECT *  FROM Password WHERE username = %s AND password = %s" (username, password))
    details = cur.fetchone()
    if details:
        return 'true'
    else:   
        return 'false

Relatively new to Python so any help would be appreciated

Answer 1

I believe the error is actually in this expression:

"SELECT *  FROM Password WHERE username = %s AND password = %s" (username, password)

Since there's no operator between the string and the (...) , it's being interpreted as a function call on a string (which naturally produces an error since a string isn't a function). You meant to put a % in between.

Answer 2

use ? instead of %s and don't forget to add comma,

cur.execute("SELECT *  FROM Password WHERE username = ? AND password = ?" ,(username, password))