/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

16 votes104 views1 answer
Python reload module without restarting
Python
9 votes111 views2 answers
Matplotlib axis rotate xticks
Python
0 vote144 views1 answer
Pdfs in django
Python Django
0 vote109 views1 answer
Wexpect in python
Python
0 vote116 views1 answer
Regularization pytorch
Python
0 vote102 views1 answer
How to define an empyt dic tin python
Python
-1 vote103 views1 answer
Heads or tails python
Python
1 vote126 views2 answers
How to pair up two lists in python
Python
1 vote97 views1 answer
Count number of repeats in list python
Python
0 vote94 views1 answer
How to create tensor with tensorflow
Python