I am trying to pass a string which has a '%' in it (its actually a sql query strin开发者_如何学Gog). How do I pass the % (do I have to use a specific escape character?
eg: compute_answertime("%how do I%")
Use another %
to escape it
>>> compute_answertime("%%how do I%%")
use %%..........
You can use:
%%; DROP TABLE Students; --
Sorry, couldn't resist.
精彩评论