bind sql parameter

bunf.py

sql_text = """
select * from a
where x = ?
and y = ?
"""

bind_values_text = """1, 2"""

sql = sql_text.replace("\n", " ")

_bind_values = bind_values_text.replace(' ', '')
bind_values = _bind_values.split(",")

param_num = sql.count('?')

if len(bind_values) != param_num:
    exit("not matched bind values num")

for value in bind_values:
    insert_value = "'" + value + "'"
    sql = sql.replace('?', insert_value, 1)

print(sql)