title: What is the best escape character strategy for Python/MySQL combo?
body: <p>This is my query.</p>
  
  <pre><code>cursor2.execute("update myTable set `"+ str(row[1]) +"` = \"'" + str(row[3]) +"'\" where ID = '"+str(row[0])+"'")
  </code></pre>
  
  <p>It is failing when row values have double quotes "some value". How do I escape all special characters?</p>