Use parameters in SQL instead of string formatting

[Denick]

birthdaymailer/mailer/birthday_data.py

Lines 21 to 25 in bbe2291

 # Use all the SQL you like 
 query="SELECT config_id, config_name, from_name, from_address, bcc_address, topic, line1, age_line, noage_line, picture_file "\ 
 "FROM config "\ 
 "WHERE config_id='%d'" % (config_id) 
 cur.execute(query) 

https://docs.python.org/3/library/sqlite3.html#sqlite3.Cursor.execute