/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

20 votes236 views5 answers
Python replace regex
Python
0 vote194 views1 answer
String in netcdf file python
Python
1 vote196 views1 answer
How to get pygame key
Python
0 vote186 views1 answer
Jupyter notebook do not show matplotlib text above plot
Python
0 vote188 views1 answer
How many perfect squared lie between 1 and 400
Python
0 vote223 views1 answer
Python console animation
Python
0 vote305 views1 answer
Set difference in multidimensional array numpy
Python
0 vote206 views1 answer
Write cell output to file jupyter colab
Python
0 vote195 views1 answer
Standard scaler vs min max scaler
Python
0 vote199 views1 answer
Tk inter entry
Python