/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote131 views1 answer
Convert number from one range to another
Python
0 vote130 views1 answer
Python draw rectangle on image
Python
18 votes88 views9 answers
Python sort dictionary by value
Python
29 votes180 views3 answers
'pipwin' is not recognized as an internal or external command
Python
2 votes128 views2 answers
Pandas update with condition
Python
2 votes167 views2 answers
How to check django rest framework version
Python Django
214 votes308 views6 answers
Python loop through dictionary
Python
3 votes162 views2 answers
Division in python
Python
0 vote167 views1 answer
Validationerror django params
Python Django
0 vote123 views1 answer
Matplotlib show two distinct plots
Python