python代码中写sql语句的模糊查询

cp_name='产品名称'
db = pymysql.connect(host="127.0.0.1", user="root", password="", db="demo", port=3306,charset='utf8')
cur = db.cursor(cursor=pymysql.cursors.DictCursor)
cur.execute('select * from demo_table where cp_name like "%%%s%%" and yh_name="云南红塔银行"' % cp_name)
res = cur.fetchall()
db.close()
print(res)