/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

4 votes255 views2 answers
Django composite primary key
Python Django
3 votes144 views1 answer
Numpy get sum
Python
4 votes144 views1 answer
How to read a file into array in python
Python
1 vote145 views1 answer
Multidimensional Java Array
Python
8 votes150 views2 answers
Print list in one line python
Python
4 votes206 views2 answers
Pil python image
Python
0 vote143 views1 answer
Highlight Active Links in Django Website
Python
0 vote146 views1 answer
Series has no attirubte reshape python
Python
0 vote158 views1 answer
Radix sort in Python
Python
0 vote133 views1 answer
Stellargraph python
Python