Python FLASK mysqlsserver连接复合体

向所有python和flask开发人员致敬，我正在尝试在flask中创建一个应用程序，但注册在主应用程序中不起作用

from flaskext.mysql import MySQL
app = Flask(__name__,static_url_path='/static')

mysql= MySQL()
app.config['MYSQL_DATABASE_USER'] = 'root'
app.config['MYSQL_DATABASE_PASSWORD'] = 'Nimnam*7'
app.config['MYSQL_DATABASE_DB'] = 'store'
app.config['MYSQL_DATABASE_HOST'] = '127.0.0.1'
mysql.init_app(app)
conn = mysql.connect()


@app.route('/')

def hello_world():
    return render_template('home.html')


@app.route('/signup/', methods=['GET','POST'])
def registeruser():
    if request.method == 'POST':
        cursor = conn.cursor()
        firstname= request.form.get('firstname')
        secondname=request.form.get('secondname')
        surname=request.form.get('surname')
        email=request.form.get('email')
        password=request.form.get('password')
        gender=request.form.get('gender')
        cursor.execute("insert into store.user values  (%s,%s,%s,%s,%s,%s)"%(firstname,secondname,surname,email,password,gender))
        cursor.commit()
        housenumber = request.form.get('housenumber')
        street = request.form.get('street')
        area= request.form.get('area')
        phonenumber1 = request.form.get('phone1')
        phonenumber2 = request.form.get('phone2')
        cursor.execute("insert into store.contact values (%s,%s,%s,%s,%s,%s)"%(phonenumber1,email,housenumber,street,area,phonenumber2))
        cursor.commit()
        return "weldone you are registerd"
    return render_template('signup.html')

if __name__ == '__main__':
    app.run()

下面是表单，signup.html模板

  <h1>We are pleased to have you join our community </h1>
      <p>There are only three essential things we need to know about you our dear customer so that you make the best of our services</p>
      <p>Currently we are operating in lefke Gemikonagi and Guzelyurt</p>
      <h2>Where you live </h2>
       <form action='/signup/' method="post">
           <fieldset>
                <legend>Identity: who you are</legend>
                <label>First name:
                     <input type="text" name="firstname" required>
                </label><br/> <br/>
                <label>Second name:
                     <input type="text" name="secondname" />
                </label><br/> <br/>
                <label>Surname:
                      <input type="text" name="surname" />
                </label>
           </fieldset><br/> <br/>
           <fieldset>
               <legend>Where you live :Adress</legend>
               <label>House number:
                    <input type="text" name="housenumber"  required >
               </label><br/> <br/>
               <label>Street:
                    <input type="text" name="street" placeholder="street or avenue" required >
               </label><br/> <br/>
               <label>Area:
                    <input type="text" name="area" placeholder="eg Lefke, Guz" required >
               </label><br/> <br/>
           </fieldset>
           <br/> <br/>
           <fieldset>
                <legend>Contact details</legend>
                <label>Phone number:
                     <input type="tel" name="phone1" pattern="[0-9]{4}-[0-9]{3}-[0-9]{4}" placeholder="Telsim or Turkcell" required>
                      <span class="note">Format: 1234-456-7890</span>
                </label><br/> <br/>
                <label>Email:
                     <input type="email" name="email" placeholder= "eg nim@gmail" required>
                </label><br/> <br/>
                <label>Phone number2:
                     <input type="tel" name="phone2" placeholder="optional"/>
                </label>

           </fieldset>
            <p>Select your gender<p>
                <label>
                    <input type="radio" name="gender" value="F"/>
                 Male
                </label>
                <label>
                    <input type="radio" name="gender" value="M" />
                    Female
                </label><br/> <br/>
                <input type="submit" vlaue="Sign up" class="lgbtn"/>

        </form>

127.0.0.1---[2019年2月1日01:10:08]“POST/signup/HTTP/1.1”500-

---

任何答案都会让人大开眼界，我是一名初学者，我将不胜感激

从不将用户数据连接到SQL字符串中。这将导致SQL注入

---

使用，使用

params

参数包含数据。

我认为问题在于insert语句中字符串对象周围缺少引号：

cursor.execute("insert into store.user values ('%s', '%s', '%s', '%s','%s', '%s')" % (firstname, secondname, surname, email, password, gender))

此外，您还应该查看flask sqlalchemy库以管理数据库：。它很容易与flask集成，并允许您轻松地迁移数据库和以编程方式编写查询

---

希望这有帮助

nit：您可以删除

存储。

以量化表。默认数据库是

store

，因此不需要显式引用SQL中的数据库。这将使以后很难单独运行rest/生产数据库。

cursor.execute("insert into store.user values ('%s', '%s', '%s', '%s','%s', '%s')" % (firstname, secondname, surname, email, password, gender))