Random Test

main.py

@@ -59,7 +59,7 @@ def list():
 @app.route("/list/user", methods=['GET'])
 def user_info():
     username = request.args.get("user")
-    c.execute("SELECT * FROM users WHERE username = '%(username)s'", {'username':username})
+    c.execute("SELECT * FROM users WHERE username = %(username)s", {'username':username})
     user_list = c.fetchall()
     if user_list != []:
         user = user_list[0]
@@ -112,9 +112,9 @@ def remove_user():
 @app.route("/adduser/user", methods=['GET'])
 def adduser():
     user = request.args.get("username")
-    c.execute("SELECT * FROM users WHERE username='%(user)s'", {'user' : user}) 
+    c.execute("SELECT * FROM users WHERE username=%(user)s", {'user' : user}) 
     if c.fetchall() == []:
-        c.execute("INSERT or IGNORE INTO users (username, balance) VALUES ('%(user)s', 0)", {'user' : user} )
+        c.execute("INSERT or IGNORE INTO users (username, balance) VALUES (%(user)s, 0)", {'user' : user})
         conn.commit()
         return 'Added user <a href="/list">user and tag list</a> <p>The creator of this website accepts no liability for any linguistic or technical errors!</p>'
     else: