[Pypgsql-users] Prepared Statements

[Ben L. <be...@zu...>]

Hi,

In my program I was building SQL queries in this fashion:

sql = "SELECT wibble FROM wobble "
sql += " WHERE somefield = '%s';" % some_variable
cursor.execute(sql)

Doing it properely gives me flexibility, especially with regard to quoting 
bytea values, and security, viz:

cursor.execute("SELECT wibble FROM wobble WHERE somefield = %s;", 
some_variable)

However, some of my SQL statements get rather complicated, is there a way of 
building one up gradually then passing it to cursor.execute()? Sometimes I 
need to include/exclude entire subclauses.

Thanks,

Ben Lamb.