In the last episode (Mar 28), Victor Subervi said:
> Hi;
> I'm trying to figure out how to upload images into a MySQL database. (Yes,
> that is what I want to do.) I have a form that asks for data, like this:
>
> 1ra Foto Pequeña:
> <input type='file' name='pic1' />
>
> Then I send that form to a python script that processes like this:
>
> cursor.execute('insert into products (' + col_names + ') values (' +
> col_values + ');')
You want to use prepared statements, bind varaibles, or placeholders
(depending on the terminology python uses) instead of manually building
queries by string concatenation.
--
Dan Nelson
[EMAIL PROTECTED]
--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]