In the last episode (Mar 28), Victor Subervi said:
> Hi;
> I'm trying to figure out how to upload images into a MySQL database. (Yes,
> that is what I want to do.) I have a form that asks for data, like this:
> 
> 1ra Foto Pequeña:
> <input type='file' name='pic1' />
> 
> Then I send that form to a python script that processes like this:
> 
> cursor.execute('insert into products (' + col_names + ') values (' +
> col_values + ');')

You want to use prepared statements, bind varaibles, or placeholders
(depending on the terminology python uses) instead of manually building
queries by string concatenation.

-- 
        Dan Nelson
        [EMAIL PROTECTED]

-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to