passing sqlite variables in python,"cursor.execute(query, data)"