在Python中编写动态SQL语句

个人经验总结，有问题请指出

0x00 前期准备

import pymysql
import datetime
conn = pymysql.connect('localhost', 'root', '****', 'sakila')
cur = conn.cursor()

# 这里准备编写sql语句

cur.close()
conn.close()

0x01 占位符方式（推荐）

aid = 1
dt = datetime.datetime(2014, 9, 25, 22, 30, 27)
sql = """SELECT * FROM address WHERE address_id = %s AND last_update = %s"""

cur.execute(sql, (aid, dt))  # 多个占位符的话用tuple或list
print(cur.fetchall())

param = {
   'dt': datetime.datetime(2014, 9, 25, 22, 30, 27)}
sql = """SELECT * FROM address WHERE address_id = 1