如何在python中獲取經過凈化的postgres SQL字符串以供以后使用？

Question

我有一個查詢，想要附加到稍后將執行的文件（以生成查詢列表）中。

location_filter="SELECT id FROM developers WHERE location='%s'"
out_file.write((location_filter, (location)))

但是寫入的輸出不能在pgadmin中執行：

("SELECT id FROM developers WHERE location='%s'", u'Seattle')

我如何安全地生成此語句？

Answer 1

conn = psycopg2.connect(database='cpn')
cur = conn.cursor()

location_filter = "SELECT id FROM developers WHERE location = %s"
out_file.write(cur.mogrify(location_filter, (location,)))