Fix regression in start_package_claims

gratipay · Apr 13, 2017 · 9926985 · 9926985
1 parent 2c2a3a5
commit 9926985
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/gratipay/models/participant/email.py b/gratipay/models/participant/email.py
@@ -187,11 +187,11 @@ def start_package_claims(self, c, nonce, *packages):
         # do a little SQL construction. Do it in such a way that we still avoid
         # Python string interpolation (~= SQLi vector).
 
-        extra_sql, values = '', []
+        extra_sql, values = [], []
         for p in packages:
-            extra_sql += ' (%s, %s)'
+            extra_sql.append('(%s, %s)')
             values += [nonce, p.id]
-        c.run('INSERT INTO claims (nonce, package_id) VALUES' + extra_sql, values)
+        c.run('INSERT INTO claims (nonce, package_id) VALUES' + ', '.join(extra_sql), values)
         self.app.add_event( c
                           , 'participant'
                           , dict( id=self.id