From 102427ddb8e7d209bdd14b4234f8fd3e1cae5aae Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Tue, 14 Mar 2023 19:47:10 +0530
Subject: [PATCH] Pass dbpath as a param to SQLite

---
 src/calibre/db/fts/connect.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/calibre/db/fts/connect.py b/src/calibre/db/fts/connect.py
index c7b6b9ce2e..39ca819a31 100644
--- a/src/calibre/db/fts/connect.py
+++ b/src/calibre/db/fts/connect.py
@@ -39,7 +39,7 @@ class FTS:
             if conn.fts_dbpath is None:
                 main_db_path = os.path.abspath(conn.db_filename('main'))
                 dbpath = os.path.join(os.path.dirname(main_db_path), 'full-text-search.db')
-                conn.execute(f"ATTACH DATABASE '{dbpath}' AS fts_db")
+                conn.execute("ATTACH DATABASE ? AS fts_db", (dbpath,))
                 SchemaUpgrade(conn)
                 conn.execute('UPDATE fts_db.dirtied_formats SET in_progress=FALSE WHERE in_progress=TRUE')
                 num_dirty = conn.get('''SELECT COUNT(*) from fts_db.dirtied_formats''')[0][0]