/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote243 views1 answer
Django button
Python Django
0 vote226 views1 answer
How to make a nice login django form
Python
0 vote212 views1 answer
How to downgrade python 3.9 to 3.8
Python
0 vote236 views2 answers
How to import image in python
Python
0 vote185 views1 answer
Group by in ruby mongoid
Python
7 votes238 views3 answers
How to display data in ascending order in django
Python Django
1 vote193 views1 answer
Alarm when code finishes
Python
3 votes191 views6 answers
Concatenate List
Python
0 vote226 views1 answer
Set remove in python
Python
0 vote210 views1 answer
Open tkinter and cli
Python