title: Execute a safe SQL SELECT statement using raw SQL and no parameters
body: <p>I'd like a method like this: </p>
  
  <pre><code>def executeSafeSqlSelect(projection, tables, where_clauses)
  </code></pre>
  
  <p>The where_clauses is a list of "WHERE" clauses that should never run any commands that could do anything other than filter results. I'm using pymysql. Is there a safe and simple way to do this without needing any ORM library and without needing to parameterize values separately?</p>