SQL Query in Python (psycopg2) SyntaxError

Question

Code where the error appears:

def isID_inTable(id,table='question'):
   cursor.execute('SELECT id FROM %s;' , [table])

Error message:

psycopg2.errors.SyntaxError: syntax error at or near "'question'"

LINE 1: SELECT id FROM 'question';

`sql = 'SELECT id FROM {};' . format(table) cursor.execute(sql)` — Dmitry Leiko, Jan 22 '20 at 13:41
I will check in a moment. but i heard its not a best practice in case of sql injection — h0ax, Jan 22 '20 at 13:43
related, possible duplicate: https://stackoverflow.com/questions/13793399/passing-table-name-as-a-parameter-in-psycopg2 — Ian McLaird, Jan 22 '20 at 16:06

score -1 · Answer 1 · answered Jan 22 '20 at 13:34

-1

You need a where clause for the query to execute

SELECT id FROM table WHERE condition

answered Jan 22 '20 at 13:34

Automata

what if they want all records, i.e. no condition? :-) – buran Jan 22 '20 at 13:36
Also use triple parenthesis """ if you are writing multi-line queries – grimur82 Jan 22 '20 at 13:38
I did triple parenthesis, no difference – h0ax Jan 22 '20 at 13:39
This is absolutely untrue. You can have a select statement without a where clause. – Ian McLaird Jan 22 '20 at 16:07

1 Answers1