/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

-1 vote176 views1 answer
Django custom primary key field
Python
1 vote252 views1 answer
Python tokens
Python
0 vote174 views2 answers
Django ajax body to json
Python
1 vote190 views1 answer
Python code to receive gmail
Python
1 vote189 views1 answer
Discord.py on command error
Python
0 vote151 views1 answer
How to search over a notebook in python
Python
0 vote174 views1 answer
Plt tickpad
Python
0 vote186 views1 answer
Shibang for python file in linux
Python
12 votes228 views3 answers
Python pandas read_csv tsv
Python
0 vote179 views1 answer
What is the use of extend in python
Python