mysql 表名字符串拼接

import mysql.connector

def get_data(table_name):
    # 连接到MySQL数据库
    db = mysql.connector.connect(
        host="localhost",
        user="yourusername",
        password="yourpassword",
        database="yourdatabase"
    )
    
    # 创建游标对象
    cursor = db.cursor()
    
    # 动态拼接SQL查询语句
    query = f"SELECT * FROM {table_name}"
    
    # 执行查询
    cursor.execute(query)
    
    # 获取查询结果
    result = cursor.fetchall()
    
    # 关闭连接
    cursor.close()
    db.close()
    
    return result

# 示例调用
data = get_data("your_table_name")
print(data)

import mysql.connector

def get_data(table_name):
    # 白名单验证表名
    allowed_tables = ["table1", "table2", "table3"]
    if table_name not in allowed_tables:
        raise ValueError("Invalid table name")
    
    # 连接到MySQL数据库
    db = mysql.connector.connect(
        host="localhost",
        user="yourusername",
        password="yourpassword",
        database="yourdatabase"
    )
    
    # 创建游标对象
    cursor = db.cursor()
    
    # 动态拼接SQL查询语句
    query = f"SELECT * FROM {table_name}"
    
    # 执行查询
    cursor.execute(query)
    
    # 获取查询结果
    result = cursor.fetchall()
    
    # 关闭连接
    cursor.close()
    db.close()
    
    return result

# 示例调用
data = get_data("table1")
print(data)