/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote216 views1 answer
Django redirect to external url
Python Django
1 vote163 views1 answer
Python 3 tkinter treeview example
Python
1 vote196 views1 answer
Incognito in selenium
Python
0 vote157 views1 answer
Calling function whose name is in a variable
Python
0 vote251 views1 answer
What will be the output of the following python code? i = 0 while i < 5: print(i) i += 1 if i == 3: break else: print(0)
Python
4 votes173 views2 answers
Check if a string is float python
Python
0 vote211 views1 answer
Django prepopulated_fields
Python Django
0 vote268 views1 answer
Extract all bounding boxes using OpenCV Python
Python
0 vote249 views1 answer
Pyspark rdd method
Python
1 vote171 views1 answer
Isistance exmaple
Python