如何插入'进入postgresql？

Question

我使用python包psycopg2来更新数据库。

cur.execute("UPDATE scholars SET name='{}' WHERE id={} and name is null".format(author, scholar_id))

psycopg2.ProgrammingError: syntax error at or near "Neill" LINE 1: UPDATE scholars SET name='O'Neill, Kevin' WHERE id=12403 and...

数据应为：O'Neill, Kevin

Answer 1

使用Psycopg's parameter passing functionality：

cur.execute ("""
    UPDATE scholars 
    SET name = %s 
    WHERE id = %s and name is null
    """,
    (author, scholar_id)
)

Triple quotes make it clearer