/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

9 votes180 views3 answers
Python venv usage
Python
0 vote155 views1 answer
Get video duration opencv python
Python
1 vote150 views1 answer
How to take input complex number in python
Python
18 votes167 views3 answers
Django-admin startproject
Python
22 votes117 views2 answers
How to drop a row in pandas
Python
0 vote174 views1 answer
The Python 2 bindings for rpm are needed for this module. If you require Python 3 support use the `dnf` Ansible module instead.. The Python 2 yum module is needed for this module. If you require Python 3 support use the `dnf` Ansible module instead.
Python
0 vote195 views1 answer
How to make booking website using django step by step
Python Django
0 vote194 views1 answer
When to use finally python
Python
4 votes138 views1 answer
How to add column headers in pandas
Python
0 vote161 views1 answer
Django get group users
Python