Merge pull request #7 from intoverflow/tcarstens/query-params

Updated _create_entry to use sqlite's parameter syntax for values
2021-12-22 05:30:28 +03:00
parent 81010fc015 405242f6da
commit 01348bf8cc
2 changed files with 3 additions and 2 deletions
--- a/datalite/datalite_decorator.py
+++ b/datalite/datalite_decorator.py
@@ -27,7 +27,8 @@ def _create_entry(self) -> None:
        try:
            cur.execute(f"INSERT INTO {table_name}("
                        f"{', '.join(item[0] for item in kv_pairs)})"
-                        f" VALUES ({', '.join(_convert_sql_format(item[1]) for item in kv_pairs)});")
+                        f" VALUES ({', '.join('?' for item in kv_pairs)})",
+                        [_convert_sql_format(item[1]) for item in kv_pairs])
            self.__setattr__("obj_id", cur.lastrowid)
            con.commit()
        except IntegrityError: