# SQL injection va parametrli so‘rovlar
# Faqat sintetik, lokal o‘quv misoli.

import sqlite3
db = sqlite3.connect(":memory:")
db.execute("CREATE TABLE users (name TEXT)")
db.executemany("INSERT INTO users VALUES (?)", [("ali",), ("vali",)])
query = "ali"
rows = db.execute("SELECT name FROM users WHERE name = ?", (query,)).fetchall()
print(len(rows))
db.close()
