sqlmapproject/sqlmap · error · NotSupportedError

parameter binding is not supported; pass a fully-formed quer

Error message

parameter binding is not supported; pass a fully-formed query string

What it means

Error "parameter binding is not supported; pass a fully-formed query string" thrown in sqlmapproject/sqlmap.

Source

Thrown at extra/dbwire/mysql.py:152

def _scramble_sha2(password, salt):
    if not password:
        return b""
    d1 = hashlib.sha256(password.encode("utf-8")).digest()
    d2 = hashlib.sha256(hashlib.sha256(d1).digest() + salt).digest()
    return _xor(d1, d2)

class Cursor(object):
    def __init__(self, connection):
        self.connection = connection
        self.description = None
        self.rowcount = -1
        self._rows = []
        self._pos = 0

    def execute(self, query, params=None):
        if params is not None:
            raise NotSupportedError("parameter binding is not supported; pass a fully-formed query string")
        self.description, self.rowcount, self._rows, self._pos = None, -1, [], 0
        self.description, self._rows, self.rowcount = self.connection._query(query)
        return self

    def fetchall(self):
        retVal = self._rows[self._pos:]
        self._pos = len(self._rows)
        return retVal

    def fetchone(self):
        if self._pos >= len(self._rows):
            return None
        retVal = self._rows[self._pos]
        self._pos += 1
        return retVal

    def close(self):
        self._rows = []

View on GitHub (pinned to 0a35b20e39)

When it happens

Trigger: Thrown at extra/dbwire/mysql.py:152 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of sqlmapproject/sqlmap@0a35b20e39 (2026-08-26). Data as JSON: /api/errors/64fff619a3771743. Report an issue: GitHub.