parameters, not string concats

This commit is contained in:
Promofaux 2016-09-28 20:31:12 +01:00
parent 083dbd1533
commit 43dca276f4

View file

@ -75,7 +75,7 @@ for line in open(logfile):
if (counts['lc'] % 10000) == 0:
conn.commit()
sql = "INSERT INTO gravity (domain) VALUES ('"+line+"')"
c.execute(sql)
sql = "INSERT INTO gravity (domain) VALUES (?)"
c.execute(sql, line)
conn.commit()