INSERT INTO table (columns) VALUES

Data & Storage

Meaning

The INSERT statement adds a new row to a relational table by specifying the target table, the columns to populate, and the corresponding values. It addresses the need to persist newly created data objects into a database. It is used whenever an application needs to store a fresh record, such as a user signup or a log entry.

Primary Function

Data manipulation

Communicative Purpose

Enables adding new rows to a relational table

Pattern

INSERT INTO table_name (column1, column2, ...) VALUES (value1, value2, ...);

Core Structure

INSERT INTO ... (...) VALUES (...);

Função primária

Data manipulation

Propósito comunicativo

Enables adding new rows to a relational table

Situações de gatilho

Web application: storing a new user registration record Data import script: inserting a row for each parsed CSV line Logging system: adding a new log entry to a logs table

Contextos

SQL databases, server‑side scripts, data migration tools, applications that interact with relational DBMS without an ORM

Padrão

INSERT INTO table_name (column1, column2, ...) VALUES (value1, value2, ...);

Estrutura central

INSERT INTO ... (...) VALUES (...);

Slots de substituição

table_name: identifier, columns: list of identifiers, values: list of expressions

Colocados típicos

column names
placeholder parameters (?
$1
:name)
VALUES keyword
INSERT INTO statement
transaction commit

Substituições comuns

INSERT ... SET column=value (MySQL)
INSERT ... SELECT * FROM other_table
INSERT ... DEFAULT VALUES
multi-row INSERT: INSERT INTO table (cols) VALUES (v1
v2)
(v3
v4)

Erros comuns

Mismatched number of columns and values → insert fails or inserts wrong data; forgetting to quote string values → syntax error or incorrect data; omitting commas between values → syntax error; using reserved words as column names without quoting → error; concatenating raw user input into query string → SQL injection vulnerability

Similar / contraste

UPDATE: modifies existing rows instead of adding new; DELETE: removes rows instead of adding; MERGE/UPSERT: inserts a row if none exists, otherwise updates existing row

Interferências

Coming from Python: may try to embed values directly with f‑strings, leading to SQL injection → use parameterized queries; Coming from JavaScript: may forget to quote string values → syntax error or incorrect data; Coming from Java: may assume concatenation with + is safe → use PreparedStatement instead

Família do chunk

INSERT
UPDATE
DELETE
MERGE

Nuance

Use when inserting new rows; avoid when updating existing rows or needing bulk load via bulk load utilities; performance: single-row INSERTs are slower than multi-row or bulk loads; boundary: column list may be omitted only when providing values for all columns in table definition order, and DEFAULT keyword can be used for default-valued columns.

Efeito pragmático

Ensures correct insertion of new rows into a table while protecting against injection attacks when used with parameterized inputs.

Dica de memória

Think of an INSERT statement like mailing a letter: you address the envelope (table and columns) and place the contents (values) inside before sending.

Nota

Always prefer parameterized queries or prepared statements to prevent SQL injection when supplying values.

Frequência: HighFormulaicidade: FixedTipo de construção: SQL DML statementPrioridade de aquisição: Automatic productionPrioridade de output: BothTag de espaçamento: ImmediateIdioma?: Sim

Examples

import sqlite3 conn = sqlite3.connect('example.db') cursor = conn.cursor() cursor.execute('CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY, name TEXT, email TEXT)') # Insert a new user record cursor.execute( "INSERT INTO users (name, email) VALUES (?, ?)", ('Alice', 'alice@example.com') ) conn.commit() cursor.close() conn.close()

import psycopg2 conn = psycopg2.connect(dbname='mydb', user='myuser', password='secret') cursor = conn.cursor() cursor.execute('CREATE TABLE IF NOT EXISTS products (id SERIAL PRIMARY KEY, name TEXT, price NUMERIC)') # Insert a product row cursor.execute( "INSERT INTO products (name, price) VALUES (%s, %s)", ('Widget', 19.99) ) conn.commit() cursor.close() conn.close()

import pymysql conn = pymysql.connect(host='localhost', user='root', password='pwd', database='shop') cursor = conn.cursor() cursor.execute('CREATE TABLE IF NOT EXISTS orders (order_id INT AUTO_INCREMENT PRIMARY KEY, customer_id INT, total DECIMAL(10,2))') # Insert an order record cursor.execute( "INSERT INTO orders (customer_id, total) VALUES (%s, %s)", (42, 123.45) ) conn.commit() cursor.close() conn.close()