/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote221 views1 answer
ModuleNotFoundError: No module named 'readline'
Python
-1 vote183 views1 answer
Receipt ocr
Python
0 vote163 views1 answer
Ignore bad lines pandas
Python
4 votes198 views2 answers
Make a nested list flat python
Python
0 vote190 views3 answers
Remove all parentheses from string python
Python
0 vote230 views1 answer
Post to instagram from pc python
Python
9 votes181 views2 answers
How to connecct id's in the models of jdango
Python
5 votes192 views2 answers
Filter dataframe with list
Python
8 votes184 views2 answers
How to count the number of files in a directory using Python
Python
0 vote225 views1 answer
Flask buildspec.yml
Python