helper-a-orig.py

class Helper:

    encoding = 'utf-8'

    def __init__(self, udid, it_pro):
        self.udid = udid
        self.itpro = it_pro

    def employee_id(self):
        sql = "select emplid from emplid_to_alphaname where alphaname = (%s);", (self.udid, )
        print(sql)

helper-corrected.py

class Helper:

    encoding = 'utf-8'

    def __init__(self, udid, it_pro):
        self.udid = udid
        self.itpro = it_pro

    def employee_id(self):
        sql = "select emplid from emplid_to_alphaname where alphaname = (%s);" % (self.udid, )
        print(sql)

helper-result.log

In [12]: Helper("False); DROP TABLE users; -- You've been pwned. --", 42).employee_id()                                        
select emplid from emplid_to_alphaname where alphaname = (False); DROP TABLE users; -- You've been pwned. --);

And all of your user data is now deleted.  This is a demonstration of how NOT to perform variable expansion in SQL.

USE PREPARED STATEMENTS