SQL无序通配符搜索（可变数量的术语）

Question

如果要搜索包含单词“ hex”和“ nut”的描述，我将使用以下查询：

cursor.execute("SELECT description FROM %s WHERE description LIKE %?% AND
    description LIKE %?%" % table_name , ["hex", "nut" ])

但是，如果用户现在要搜索包含5个词的描述该怎么办？

以前在纯sql中，我曾编写过类似的代码来生成结果：

base = """
SELECT description FROM {0}
WHERE
""".format(table_name)
command = base
# Adding "AND" for each term
for i in range(len(search_terms)):
    # Last portion of the SQL query
    if i == (len(search_terms) - 1):
        command += " description LIKE '%{0}%'".format(search_terms[i])
    else:
        command += " description LIKE '%{0}%' AND ".format(search_terms[i])
command = command.replace("\n", "")
cursor.execute(command)

但是我希望使用sqlite和sql查询有更好的方法。 我知道我可以将所有数据加载到内存中，并使用纯Python实现我想要的但我想要的SQL。 那么，有没有一种优雅而安全的方法呢？

我是stackoverflow和SQL的新手，所以如果我问错了问题，请告诉我。

Answer 1

考虑使用Python的str.join进行列表理解：

table_name = 'prices'                                    # EXAMPLE
command = """ SELECT description FROM {0} WHERE """.format(table_name)

search_terms = ['hex', 'nut', 'screw', 'bolt', 'nail']   # EXAMPLE
where = ' AND '.join(["description LIKE '%?%'" for i in search_terms])

command = command + where    
print(command)
#  SELECT description FROM prices WHERE description LIKE %?% AND description LIKE %?%
#         AND description LIKE %?% AND description LIKE %?% AND description LIKE %?% 

cursor.execute(command, search_terms)                    # PARAMETERIZED QUERY