/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

8 votes98 views2 answers
How to merge two variables to get an array in python
Python
0 vote142 views1 answer
Arma-garch model python
Python
0 vote99 views1 answer
Get all commands discord.py
Python
6 votes104 views1 answer
Getting dummies and input them to pandas dataframe
Python
1 vote107 views1 answer
Th2=cv2.adaptiveThreshold(img, 255 ,cv2.ADAPTIVE_THRESH_MEAN_C, cv2.THRESH_BINARY, 11 # no of block size , 2 #c)
Python
0 vote93 views1 answer
Equivalent of spread in R in python
Python
0 vote114 views1 answer
Python glob subdirectories
Python
0 vote112 views1 answer
Print(1) in python
Python
1 vote111 views1 answer
How to pronounce aesthetic
Python
133 votes97 views6 answers
Python read json
Python