In Python, the “WHERE” statement is used to get filtered data from a MySQL table.

import mysql.connector

mydb = mysql.connector.connect(
    host="localhost",
    user="myusername",
    password="mypassword",
    database="mydatabase"
)

mycursor = mydb.cursor()

sql = "SELECT * FROM customers WHERE age = 12"

mycursor.execute(sql)

myresult = mycursor.fetchall()

for x in myresult:
    print(x)

Output:

(2, 'Johnny', 12)

The % to represent wildcard characters, allowing the selection of records that start, includes, or ends with a specified letter or phrase.

import mysql.connector

mydb = mysql.connector.connect(
    host="localhost",
    user="myusername",
    password="mypassword",
    database="mydatabase"
)

mycursor = mydb.cursor()

sql = "SELECT * FROM customers WHERE name Like '%nny%'"

mycursor.execute(sql)

myresult = mycursor.fetchall()

for x in myresult:
    print(x)

Output:

(2, 'Johnny', 12)

To prevent SQL injections, which is a common web hacking technique to destroy or misuse your database, certain values should be escaped using the mysql.connector module.

import mysql.connector

mydb = mysql.connector.connect(
    host="localhost",
    user="myusername",
    password="mypassword",
    database="mydatabase"
)

mycursor = mydb.cursor()

sql = "SELECT * FROM customers WHERE name = %s"
name = ("Johnny", )

mycursor.execute(sql, name)

myresult = mycursor.fetchall()

for x in myresult:
    print(x)

Output:

(2, 'Johnny', 12)

---