python pymysql

sql执行函数封装

from pymysql import connect

def sqlExec(sqlstr):
    conn = connect(host="192.168.10.20",
                    port=3306,
                    database="test",
                    user="root",
                    password="*****",
                    charset="utf8")
    cursor = conn.cursor()
    execsql = sqlstr
    cursor.execute(execsql)
    res = cursor.fetchall()
    conn.commit()
    cursor.close()
    conn.close()
    return res

CRUD

tablename = 'temp_tname'
    
# 顺序查询数据库
querySql = "SELECT id,name,code from " + tablename
#updateSQL
updateSql = "UPDATE " + tablename + " SET name='" + name + "',age='"+ age +"' WHERE id='" + str(id)+"'"
#insert SQL
valuesStr = '"'+data[0]+'","'+data[1]+'","'+data[2]+'","","",0'
execSql = "INSERT INTO " + tablename + " (id,name,age) VALUES (" + valuesStr + ')'

符号转换

data = ['91110302MA01QC4T52', '京东方"', '91110302MA01QC4T52']
valuesstr = "'"+data[0]+"','"+data[1]+"','"+data[2]+"','','',0"
print(valuesstr)

for j in range(len(data)):
    if data[j].find('\'') != -1:
        data[j] = data[j].replace("'", "\\'")
    if data[j].find('\"') != -1:
        data[j] = data[j].replace('"', '\\"')