Re: How do I use parameterized queries with LIKE? - Mailing list psycopg

From W. Matthew Wilson
Subject Re: How do I use parameterized queries with LIKE?
Date
Msg-id CAGHfCUDiK+MVfiYywe=_SeZk9FZPgCd2Ea+Mfyp7K7kBiWmw0g@mail.gmail.com
Whole thread Raw
In response to Re: How do I use parameterized queries with LIKE?  (Daniele Varrazzo <daniele.varrazzo@gmail.com>)
Responses Re: How do I use parameterized queries with LIKE?
10.6 Mac build - Intel only
List psycopg
On Mon, May 28, 2012 at 6:42 PM, Daniele Varrazzo
<daniele.varrazzo@gmail.com> wrote:
> If you have parameters in the query, % is used as placeholder prefix.
> You must use %% to include a literal % in the query:
>
>    In [14]: cur.execute("""select email_address from customer where
>        email_address like '%%' || %s || '%%'""", ('matt',))
>
> or you can add the % to the value instead of the query:
>
>    In [17]: cur.execute("""select email_address from customer where
>        email_address like %s""", ('%matt%',))

Thanks so much!  I'm using the first solution, so that I can just
extract user-submitted data and pass it right in, rather than
prepending and appending '%' on the user data.

Matt



--
W. Matthew Wilson
matt@tplus1.com
http://tplus1.com

psycopg by date:

Previous
From: "P. Christeas"
Date:
Subject: Re: How do I use parameterized queries with LIKE?
Next
From: Federico Di Gregorio
Date:
Subject: Re: How do I use parameterized queries with LIKE?