Parameterized Statements
The following code example shows how to bind parameters to create parameterized statements.
Single-Use Statements
The execute method accepts an additional sequence for binding query parameters to values.
cursor.execute("SELECT Name, Industry FROM Accounts WHERE Industry = ?", ("Manufacturing",)) for (Name, Industry) in cursor: print("Name = {}, Industry = {}".format(Name, Industry))
Multi-Use Statements
The executemany method can be used to execute the same query repeatedly with different sets of parameters. Instead of a sequence of parameters, executemany accepts a nested sequence of parameters which are used for each execution.
executemany works only with INSERT, UPDATE and DELETE statements. It cannot be used with any operation that returns results, such as a SELECT or an EXECUTE.
params = [ ("Chemicals 1",), ("Chemicals 2",), ("Chemicals 3",), ] cursor.executemany("INSERT INTO Accounts (Industry) VALUES (?)", params)