我个人认为，以下是用Python编写原始SQL查询的最佳（简单、安全和Python化）方法，尤其是在使用Python的sqlite3模块时：

query = '''
    SELECT
        action.descr as action,
        role.id as role_id,
        role.descr as role
    FROM
        public.role_action_def,
        public.role,
        public.record_def,
        public.action
    WHERE
        role.id = role_action_def.role_id
        AND record_def.id = role_action_def.def_id
        AND action.id = role_action_def.action_id
        AND role_action_def.account_id = ?
        AND record_def.account_id = ?
        AND def_id = ?
'''
vars = (account_id, account_id, def_id)   # a tuple of query variables
cursor.execute(query, vars)   # using Python's sqlite3 module

Pros

整洁而简单的代码（Pythonic！）避免SQL注入与Python 2和Python 3兼容（毕竟是Pythonic）不需要字符串串联无需确保每行最右边的字符是空格

Cons

由于查询中的变量被替换为？占位符，它可能会变得有点难以跟踪哪个？当查询中有很多Python变量时，将由哪个Python变量替换。

我使用递归函数来构建复杂的SQL查询。此技术通常可用于构建大型字符串，同时保持代码可读性。

# Utility function to recursively resolve SQL statements.
# CAUTION: Use this function carefully, Pass correct SQL parameters {},
# TODO: This should never happen but check for infinite loops
def resolveSQL(sql_seed, sqlparams):
    sql = sql_seed % (sqlparams)
    if sql == sql_seed:
        return ' '.join([x.strip() for x in sql.split()])
    else:
        return resolveSQL(sql, sqlparams)

P.S.：看看很棒的python-sqlparse库，如果需要，可以打印SQL查询。

用\换行对我很有用。下面是一个例子：

longStr = "This is a very long string " \
        "that I wrote to help somebody " \
        "who had a question about " \
        "writing long strings in Python"

我个人认为，以下是用Python编写原始SQL查询的最佳（简单、安全和Python化）方法，尤其是在使用Python的sqlite3模块时：

query = '''
    SELECT
        action.descr as action,
        role.id as role_id,
        role.descr as role
    FROM
        public.role_action_def,
        public.role,
        public.record_def,
        public.action
    WHERE
        role.id = role_action_def.role_id
        AND record_def.id = role_action_def.def_id
        AND action.id = role_action_def.action_id
        AND role_action_def.account_id = ?
        AND record_def.account_id = ?
        AND def_id = ?
'''
vars = (account_id, account_id, def_id)   # a tuple of query variables
cursor.execute(query, vars)   # using Python's sqlite3 module

Pros

整洁而简单的代码（Pythonic！）避免SQL注入与Python 2和Python 3兼容（毕竟是Pythonic）不需要字符串串联无需确保每行最右边的字符是空格

Cons

由于查询中的变量被替换为？占位符，它可能会变得有点难以跟踪哪个？当查询中有很多Python变量时，将由哪个Python变量替换。

你说的是多行字符串吗？简单，使用三引号开始和结束它们。

s = """ this is a very
        long string if I had the
        energy to type more and more ..."""

您也可以使用单引号（当然，在开始和结束处有3个引号），并像对待任何其他字符串一样对待生成的字符串。

注意：与任何字符串一样，起始引号和结束引号之间的任何内容都将成为字符串的一部分，因此本示例有一个前导空格（如@root45所指出的）。此字符串还将包含空格和换行符。

即。，：

' this is a very\n        long string if I had the\n        energy to type more and more ...'

最后，您还可以在Python中构造如下的长行：

 s = ("this is a very"
      "long string too"
      "for sure ..."
     )

这将不包括任何额外的空格或换行符（这是一个故意的示例，显示跳过空格的效果）：

'this is a verylong string toofor sure ...'

不需要逗号，只需将要连接在一起的字符串放入一对括号中，并确保考虑到任何需要的空格和换行符。

我认为当代码（例如，变量）缩进并且输出字符串应该是单行（没有换行）时，另一个选项更可读：

def some_method():

    long_string = """
A presumptuous long string
which looks a bit nicer
in a text editor when
written over multiple lines
""".strip('\n').replace('\n', ' ')

    return long_string