/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote282 views1 answer
Tkiner lable
Python
1 vote449 views1 answer
Check if the user is logged in django decorator
Python Django
0 vote214 views1 answer
Python dataframe copy structure
Python
3 votes207 views2 answers
Python 3 numbers of a range is even
Python
0 vote278 views1 answer
Conditional Statements to Skip Items
Python
0 vote276 views2 answers
Generate random string with special characters and numbers in python
Python
1 vote233 views1 answer
Using regex validators in django models
Python Django
1 vote189 views1 answer
Text to sound python
Python
155 votes290 views6 answers
Python os if file exists
Python
57 votes235 views6 answers
Train test split sklearn
Python