/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote127 views1 answer
How to remove trackback on python when ctrl c
Python
0 vote92 views1 answer
Use iloc to loop through dataframe
Python
16 votes91 views2 answers
Python delete contents of file
Python
0 vote92 views1 answer
Ciclo while python
Python
0 vote113 views1 answer
Series object has no attribute columns
Python
0 vote104 views1 answer
Pandas groupby counts
Python
0 vote88 views1 answer
Python placeholder
Python
0 vote180 views1 answer
Python - give a name to index column
Python
3 votes138 views1 answer
Disable csrf for one url django
Python
0 vote92 views1 answer
Axes increase fonsize of values python
Python