python操作sql 中间有变量

sql = '''
 INSERT INTO tb_kesucontent_effective (keId, ''' + apiname + 
''' ) VALUES (  %s ,%s) ON DUPLICATE KEY UPDATE ''' + apiname + 
''' =%s  '''

def insert_update_db_effective(m_id, apiname, fvalue):
    db = pymysql.connect(host='10.199.207.225', user='kanban', password='lTywlHuKufgE3w44', port=3306,
                         database='kanban')
    cursor = db.cursor()
    # m_values=('keId',apiname,m_id,fvalue,apiname,fvalue)

    m_values = (m_id, fvalue, fvalue)
    print(m_values)
    sql = ''' INSERT INTO tb_kesucontent_effective (keId, ''' + apiname + ''' ) VALUES (  %s ,%s) ON DUPLICATE KEY UPDATE ''' + apiname + ''' =%s  '''
    print(sql)
    # SELECT keId FROM tb_kesucontent where keId = %s
    try:
        cursor.execute(sql, m_values)
        results = cursor.fetchall()
        db.commit()
        print('查询数据成功')
    except Exception as e:
        db.rollback()
        print("查询数据失败")
        return None
    db.close()