dak hates the name "Mike O'Connor". This uses pg.escape_string to make it love
my name instead.
projectB.query(""" INSERT INTO new_comments (package, version, comment, author)
VALUES ('%s', '%s', '%s', '%s')
projectB.query(""" INSERT INTO new_comments (package, version, comment, author)
VALUES ('%s', '%s', '%s', '%s')
- """ % (package, version, comment, author) )
+ """ % (package, version, pg.escape_string(comment), pg.escape_string(author)))