sql = "insert into t_product_pictures(photoID, productID, filename, thumbnail, enlarged) values(%s, %s, '%s', '%s', '%s')" % (photoID, row[0],   file, file, file)
print sql
cursor.execute(sql)

insert into t_product_pictures(photoID, productID, filename, thumbnail, enlarged) values(4946, 11709, '0501035006802_01.jpg', '0501035006802_01.jpg', '0501035006802_01.jpg')

_mysql_exceptions.OperationalError: (1054, "Unknown column 'al' in 'where clause'")

Traceback (most recent call last):
  File "./file_uploader.py", line 20, in <module>
    cursor.execute(sql)
  File "build/bdist.openbsd-4.3-i386/egg/MySQLdb/cursors.py", line 174, in execute
  File "build/bdist.openbsd-4.3-i386/egg/MySQLdb/connections.py", line 36, in defaulterrorhandler
_mysql_exceptions.OperationalError: (1054, "Unknown column 'al' in 'where clause'")

data = [photoID, row[0], file, file, file]
cursor.execute('insert into t_product_pictures values (?,?,?,?,?)', data)

photoID	        int(11)
productID	int(11)
filename	varchar(50)
thumbnail	varchar(50)
enlarged	varchar(50)

cursor.execute('insert into t_product_pictures values (?,?,?,?,?)', data)
  File "build/bdist.openbsd-4.3-i386/egg/MySQLdb/cursors.py", line 159, in execute
TypeError: not all arguments converted during string formatting

sql='insert into t_product_pictures (photoID, productID, filename, thumbnail, enlarged) values (%d, %d, "%s", "%s", "%s")' % (photoID, row[0], file, file, file)
cursor.execute(sql)

File "build/bdist.openbsd-4.3-i386/egg/MySQLdb/cursors.py", line 174, in execute
  File "build/bdist.openbsd-4.3-i386/egg/MySQLdb/connections.py", line 36, in defaulterrorhandler
_mysql_exceptions.OperationalError: (1054, "Unknown column 'al' in 'where clause'")

#!/usr/local/bin/python

import os
import shutil
import MySQLdb

src_dir = 'photo'
dst_dir = ('big', 'medium', 'small')
dst_path = '/var/www/kodak/shop/data'

db = MySQLdb.connect(host = "localhost", user = "_mysql", passwd = "derparol", db = "shop_new")
cursor = db.cursor()

cursor.execute("select max(photoID) + 1 from t_product_pictures")
photoID = cursor.fetchone()[0]


for file in os.listdir(src_dir):
    sql = "select productID from t_products where product_code=" + file[:file.find('_')]
    cursor.execute(sql)
    row = cursor.fetchone()
    if row == None:
        print "Product with barcode " + file[:file.find('_')] + " not found in store!"
    else:
        sql='insert into t_product_pictures (photoID, productID, filename, thumbnail, enlarged) values (%d, %d, "%s", "%s", "%s")' % (photoID, row[0], file, file, file)
        cursor.execute(sql)

        print "ProductID row[0] updated"
        for sub_path in dst_dir:
            pass
        photoID += 1

data = [photoID, row[0], file, file, file]
print data
cursor.execute('insert into t_product_pictures values (?,?,?,?,?)', data)

[4949L, 11709L, '0501035006802_01.jpg', '0501035006802_01.jpg', '0501035006802_01.jpg']

sql = """insert into t_product_pictures values (%d, %d, %s, %s, %s)""" % (photoID, row[0], db.literal(file), db.literal(file), db.literal(file))
cursor.execute(sql)