The following code example shows how to bind parameters to create parameterized statements.

Single-Use Statements

The execute method accepts an additional sequence for binding query parameters to values.

cursor.execute("SELECT From_User_Name, Text FROM Tweets WHERE From_User_Name = ?", ("twitter",))
for (From_User_Name, Text) in cursor:
    print("From_User_Name = {}, Text = {}".format(From_User_Name, Text))

Multi-Use Statements

The executemany method can be used to execute the same query repeatedly with different sets of parameters. Instead of a sequence of parameters, executemany accepts a nested sequence of parameters which are used for each execution.

executemany works only with INSERT, UPDATE and DELETE statements. It cannot be used with any operation that returns results, such as a SELECT or an EXECUTE.

params = [
  ("My twitter message 2 1",),
  ("My twitter message 2 2",),
  ("My twitter message 2 3",),
]

cursor.executemany("INSERT INTO Tweets (Text) VALUES (?)", params)