/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote132 views2 answers
Python time a code segment
Python
0 vote131 views1 answer
Xkcd remove feature matplotlib
Python
6 votes152 views3 answers
Import pandas
Python
0 vote163 views1 answer
Chrome crushs in selenium
Python
0 vote135 views1 answer
Python min length list of strings
Python
-1 vote93 views2 answers
Embed discord bot python
Python
0 vote131 views1 answer
Google youtuve api python
Python
12 votes153 views1 answer
Get program path directory
Python
1 vote143 views2 answers
Correlation between categorical and continuous variables
Python
9 votes145 views1 answer
How do you change a string to only uppercase in python
Python