无法使用MySQL将PDF文件插入到

Question

我卡住了。我一直试图在MySQL db中插入一个pdf文件，但我做不到，我尝试过使用mysql.connector和MySQLdb类。我几乎都犯了同样的错误。我读过很多关于这个问题的文章。我试过逗号和变量。这是我的代码和错误；

import mysql.connector

db = mysql.connector.connect(host="127.0.0.1", user='root', password='masatablo', db='yukleme')

c  = db.cursor()

acilacak_dosya = open("bizim.PDF", "rb")

yuklenecek_dosya = acilacak_dosya.read()

c.execute ("INSERT INTO pdfler (cizim) VALUES(%s)" %(yuklenecek_dosya))

db.commit()

db.close()

ERROR with mysql.connector:
mysql.connector.errors.ProgrammingError: 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'b'%PDF-1.4\r%\xe2\xe3\xcf\xd3\r\n4 0 obj\r<</Linearized 1/L 83892/O 6/E 79669/N ' at line 1

ERROR with MySQLdb:
_mysql_exceptions.ProgrammingError: (1064, "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'b'%PDF-1.4\\r%\\xe2\\xe3\\xcf\\xd3\\r\\n4 0 obj\\r<</Linearized 1/L 83892/O 6/E 79669/N ' at line 1")

Answer 1

您需要使用参数，而不是字符串内插。

使用SQL的字符串内插容易受到SQL注入攻击。

c.execute("INSERT INTO pdfler (cizim) VALUES (%s)", (yuklenecek_dosya,))