Using bind parameters. https://docs.python.org/3.8/library/sqlite3.html#sqlite3.Cursor # Never do this -- insecure! symbol = 'RHAT' cur.execute("SELECT

Using bind parameters. https://docs.python.org/3.8/library/sqlite3.html#sqlite3.Cursor # Never do this -- insecure! symbol = 'RHAT' cur.execute("SELECT \* FROM stocks WHERE symbol = '%s'" % symbol) # Do this instead t = ('RHAT',) cur.execute('SELECT \* FROM stocks WHERE symbol=?', t) print(cur.fetchone()) # Larger example that inserts many records at a time purchases = [('2006-03-28', 'BUY', 'IBM', 1000, 45.00), ('2006-04-05', 'BUY', 'MSFT', 1000, 72.00), ('2006-04-06', 'SELL', 'IBM', 500, 53.00), ] cur.executemany('INSERT INTO stocks VALUES (?,?,?,?,?)', purchases)