Before we used insecure python variables to assemble a query string. Now we use the DB-APIs parameter subtitution. pymysqlite was switched for sqlite due to being included in python.