/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

6 votes147 views2 answers
How to sort a list randomly in python
Python
0 vote143 views2 answers
Selenium delete cookies python
Python
1 vote164 views2 answers
Python write request must be str not bytes
Python
0 vote141 views1 answer
How to export schema in graphene django
Python
0 vote132 views1 answer
Python sklearn knn regression example
Python
1 vote181 views1 answer
Django filter not equal to
Python Django
0 vote133 views1 answer
Pandas change to first day
Python
2 votes141 views1 answer
How to reapete the code in python
Python
0 vote133 views1 answer
Python animation
Python
0 vote147 views1 answer
Pandas get data from upper row
Python