Django中执行sql语句,取出相关的官方文档描述
If you’re not familiar with the Python DB-API, note that the SQL statement in cursor.execute() uses placeholders, “%s”, rather than adding parameters directly within the SQL. If you use this technique, the underlying database library will automatically escape your parameters as necessary.
Also note that Django expects the “%s” placeholder, not the “?” placeholder, which is used by the SQLite Python bindings
举例如下:
from django.db import connection
with connection.cursor() as c:
c.execute(...)
相当于:
c = connection.cursor()
try:
c.execute(...)
finally:
c.close()
with connection.cursor() as cursor:
cursor.execute("UPDATE bar SET foo = 1 WHERE baz = %s", [self.baz])
cursor.execute("SELECT foo FROM bar WHERE baz = %s", [self.baz])
row = cursor.fetchone()
执行实例如下:sql语句中的关键字需要大写才能生效
with connection.cursor() as cursor:
cursor.execute("SELECT hostname FROM web_asset WHERE id = %s", [kwargs['id']])
row = cursor.fetchone()
# 返回的row是tuple(元祖)类型的数据
print(row[0])