format String in SQL statement.

[Ofnuts]

With this:

WHERE last_name = ? AND rental_rate LIKE ? AND rental_date LIKE ? AND return_date LIKE ? AND rental_duration LIKE ?'
   test = db.execute(query,['%'+name+'%','%%','%'+month+'%','%%','%r%'])

you are in effect:

• checking for an exact match between the name and  '%JohnDoe%' (because the '%' are taken literally since you are using = and not LIKE
  
• accepting any rental rate (assuming rental_rate is a string and not a number)
  
• checking only for the month in the rental date (and the way it is written it can match any two digits in the date, whether they represent the year, the month, the day, or even digits between them).
  
• taking anything for the return date
  
• checking that the rental_duration contains a 'r'  
  

Make it simple for yourself, just make queries that take only one single criterion (name, rate,dates, duration...), and test them individually. Once you have them all working
combine them in one single query.

In addition, people rarely come up with SQL queries directly in their application code. They use SQL editors, that allow them to test their queries directly, show them error in the SQL synatx, display results, etc... . Once these queries work, they are adapted to be part of the code of the application (which at that point is a fairly trivial task). A free SQL editor is Squirrel-SQL.