Update routes.py

cfsgranda · Jul 10, 2024 · d14380b · d14380b
1 parent 03b2586
commit d14380b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/routes.py b/server/routes.py
@@ -13,13 +13,13 @@ def index():
 
     if name:
         cursor.execute(
-            "SELECT * FROM books WHERE name LIKE '%" + name + "%'"
+            "SELECT * FROM books WHERE name LIKE %s", name
         )
         books = [Book(*row) for row in cursor]
 
     elif author:
         cursor.execute(
-            "SELECT * FROM books WHERE author LIKE '%" + author + "%'"
+            "SELECT * FROM books WHERE author LIKE %s", author
         )
         books = [Book(*row) for row in cursor]