We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent ddb4366 commit a346824Copy full SHA for a346824
server/routes.py
@@ -19,7 +19,7 @@ def index():
19
20
elif author:
21
cursor.execute(
22
- "SELECT * FROM books WHERE author LIKE '%" + author + "%'"
+ "SELECT * FROM books WHERE author LIKE %s", author
23
)
24
books = [Book(*row) for row in cursor]
25
0 commit comments