prepared statements using psycopg

Question

I'm a beginner at python. We use this code to execute SQL commands.

cur.execute("INSERT INTO test (num, data) VALUES (%s, %s)", (100, "abcdef"))

I wonder is this prepared statement or just a client side quoting?

See here: http://stackoverflow.com/questions/6775497/psycopg-get-formatted-sql-instead-of-executing — socketpair, Oct 26 '14 at 18:00

score 21 · Accepted Answer · edited Jun 25 '13 at 12:15

No, it does not, not for psycopg2 at least. The "Prepare" in the docs refers to a "PREPARE TRANSACTION" which is entirely different than a prepared statement.

You can emulate a prepared statement, by overriding the methods or executing extra statements, however. See: An example of psycopg2 cursor supporting prepared statements

Please see: relevant blog entry for psycopg.

More information:

http://www.postgresql.org/docs/9.2/static/sql-prepare.html
http://www.postgresql.org/docs/current/static/sql-prepare-transaction.html

score 0 · Answer 2 · answered Nov 07 '21 at 18:11

psycopg does support prepared statements starting with version 3:

https://www.psycopg.org/psycopg3/docs/advanced/prepare.html#prepared-statements

A query is prepared automatically after it is executed more than prepare_threshold times on a connection.

score -8 · Answer 3 · answered Mar 26 '12 at 03:49

-8

According to the docs the execute method will "Prepare and execute a database operation (query or command).". So yes, it is a prepared statement.

answered Mar 26 '12 at 03:49

SpliFF

37,036
16
86
116

14

Actually it currently does not. The "Prepare" in this documentation refers to a "PREPARE TRANSACTION" call required for two-phase commit, not a precompiled SQL statement. – Brian Apr 15 '13 at 18:16

prepared statements using psycopg

3 Answers3

Linked