Michael Mabin wrote:
       cursor.execute("""
                   SELECT titem.object_id, titem.tag_id
                   FROM tagging_taggeditem titem
                   WHERE titem.object_id IN (%s)
               """ % ','.join([str(x) for x in [1,5,9]])

Nope. That would be dangerous! -> google for SQL injection

Tino

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
http://mail.python.org/mailman/listinfo/python-list

Reply via email to