您确实需要正确的
?s数量，但这不会带来sql注入风险：
>>> result_set = c.execute('SELECt * FROM distro WHERe id IN (%s)' % ','.join('?'*len(desired_ids)), desired_ids)>>> print result_set.fetchall()[(1, u'Ubuntu'), (2, u'Fedora'), (5, u'SuSE')]
您确实需要正确的
?s数量，但这不会带来sql注入风险：
>>> result_set = c.execute('SELECt * FROM distro WHERe id IN (%s)' % ','.join('?'*len(desired_ids)), desired_ids)>>> print result_set.fetchall()[(1, u'Ubuntu'), (2, u'Fedora'), (5, u'SuSE')]名师互学网 版权所有 (c)2021-2022 ICP备案号：晋ICP备2021003244-6号
