/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote121 views1 answer
Como inserir um elemento num set em python
Python
0 vote123 views2 answers
PrintThis is not a function
Python
1 vote137 views1 answer
Qpushbutton text alignment
Python
7 votes161 views5 answers
Django messages
Python Django
0 vote133 views1 answer
Filtering certain rows in python that contains a part of string
Python
0 vote126 views1 answer
Rotate image by specific angle opencv
Python
10 votes158 views2 answers
Copy whole directory python
Python
3 votes118 views2 answers
Python writelines newline
Python
6 votes134 views3 answers
Pd read csv unname
Python
8 votes110 views1 answer
Remove strings from a list python if they're short
Python