python查询问题

Question

根据打开的页面的itemid值，查询name，然后将itemid对应的name的值打印出来，需要根据当前代码做修改，感谢~

```python

import random
import string
import pymysql
import cherrypy
import os
import json


import os
import sys
import scene_reader
from tools import check_labels  as check
import urllib.parse

url = '*********/?itemid=1'
parsed_url = urllib.parse.urlparse(url)
params = urllib.parse.parse_qs(parsed_url.query)
itemid = params['itemid'][0]


try:
    conn = pymysql.connect(host="localhost", user="*", password="*", database="*")
except pymysql.Error as e:
    print ("error")

cursor = conn.cursor() 
cursor.execute("select name from test where id='1'")
datas = cursor.fetchall()
datass = datas[0][0]
print (datass)

```

Answer 1

import random
import string
import pymysql
import cherrypy
import os
import json

import os
import sys
import scene_reader
from tools import check_labels  as check
import urllib.parse

url = '*********/?itemid=1'
parsed_url = urllib.parse.urlparse(url)
params = urllib.parse.parse_qs(parsed_url.query)
itemid = params['itemid'][0]

try:
    conn = pymysql.connect(host="localhost", user="*", password="*", database="*")
except pymysql.Error as e:
    print ("error")

cursor = conn.cursor()
cursor.execute("select name from test where id=%s",(itemid,))
datas = cursor.fetchall()
datass = datas[0][0]
print (datass)

基于 URL 中传递的 itemid 值从数据库中检索 name 值的。它首先使用 urllib.parse 提取 URL 中的 itemid 值，然后使用 pymysql 建立到 MySQL 数据库的连接。然后它根据 itemid 值查询数据库中与之对应的 name 值，并将其打印出来。SQL 查询使用参数化查询来防止 SQL 注入攻击。