python - 类型错误 : 'str' object is not callable in MySQL

Question

我正在尝试转换为 str

import mysql.connector
from mysql.connector import Error

def VeriEkleme(Deger1,Deger2):
    try:
        connection = mysql.connector.connect(host='localhost',database='pythonregister',user='pyroot',password='')

        if connection.is_connected():
            print("MySQL bağlantısı aktif edildi.")

        mySql_insert_query = """INSERT INTO userinformations (Username, Password) VALUES """(Deger1,Deger2)
        cursor = connection.cursor()
        result = cursor.execute(mySql_insert_query)
        connection.commit()
        print("Record inserted successfully into Laptop table")
        cursor.close()

    except Error as e:
        print("Error while connecting to MysqL", e)

def Register():
    Username = input("Username:")
    Password = input("Pass:")
    VeriEkleme(str(Username),str(Password))


def EnterSystem():
    Login = "login"
    Answer = input("Login or Register?: ").lower()
    if Answer == Login:
        print("eşit")
        Register()
    else:
        EnterSystem()

EnterSystem()

Login or Register?: login
eşit
Username:s
Pass:s
MySQL bağlantısı aktif edildi.
Traceback (most recent call last):
  File "C:/Users/Relov/PycharmProjects/PygameProje1/PygameProjesi.py", line 36, in <module>
    EnterSystem()
  File "C:/Users/Relov/PycharmProjects/PygameProje1/PygameProjesi.py", line 32, in EnterSystem
    Register()
  File "C:/Users/Relov/PycharmProjects/PygameProje1/PygameProjesi.py", line 24, in Register
    VeriEkleme(str(Username),str(Password))
  File "C:/Users/Relov/PycharmProjects/PygameProje1/PygameProjesi.py", line 11, in VeriEkleme
    mySql_insert_query = """INSERT INTO userinformations (Username, Password) VALUES """(Deger1,Deger2)
TypeError: 'str' object is not callable

Process finished with exit code 1

Answer 1

你正在调用 str 因为它是一个函数。

"""INSERT INTO userinformations (Username, Password) VALUES """(Deger1,Deger2)

我建议使用准备好的语句。这对于 SQL 注入(inject)攻击是安全的。

mySql_insert_query = """INSERT INTO userinformations (Username, Password) VALUES (%s, %s)"""
cursor = connection.cursor()
result = cursor.execute(mySql_insert_query, (Deger1, Deger2))