/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

2 votes106 views1 answer
Pass in queryset as filter django
Python
0 vote109 views1 answer
Selenium proxy python chrome
Python
1 vote108 views1 answer
Display category field in django admin
Python
0 vote119 views1 answer
Cv2 read rgb image
Python
1 vote72 views1 answer
_reverse_with_prefix() argument after * must be an iterable, not int
Python
8 votes76 views2 answers
Python "is"
Python
0 vote119 views1 answer
Truthy falsy python
Python
3 votes106 views1 answer
How do you print a integer in python
Python
8 votes119 views2 answers
Matplotlib x label rotation
Python
0 vote111 views1 answer
Python detect warning
Python