Updated _create_entry to use sqlite's parameter syntax for values

2021-12-21 02:09:06 -08:00
parent 81010fc015
commit 405242f6da
2 changed files with 3 additions and 2 deletions
--- a/datalite/datalite_decorator.py
+++ b/datalite/datalite_decorator.py
@@ -27,7 +27,8 @@ def _create_entry(self) -> None:
        try:
            cur.execute(f"INSERT INTO {table_name}("
                        f"{', '.join(item[0] for item in kv_pairs)})"
-                        f" VALUES ({', '.join(_convert_sql_format(item[1]) for item in kv_pairs)});")
+                        f" VALUES ({', '.join('?' for item in kv_pairs)})",
+                        [_convert_sql_format(item[1]) for item in kv_pairs])
            self.__setattr__("obj_id", cur.lastrowid)
            con.commit()
        except IntegrityError: