Jan-10-2023, 06:32 AM
You shouldn't be using
str.format
to construct queries. Use your database's placeholder syntax instead. See, for example https://bobby-tables.com/.