how to insert variable into python sql query?

Question

Python

There is this code:

sql.execute("UPDATE users SET message = random[0] WHERE id = user[0];")
 db.commit()
Этот код не работает

How to correctly insert random[0] and user[0]

Answer 1

sql = "UPDATE `users` SET `message` = %s WHERE `id` = %s"
cursor.execute(sql, (random[0], user[0]))