/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote205 views1 answer
Jinja 2 iterate over dictionary
Python
54 votes194 views3 answers
Getting size of list in python
Python
15 votes194 views2 answers
How to add beautifulsoup to python
Python
0 vote209 views1 answer
Keras train_on_batch
Python
60 votes200 views6 answers
Python current date
Python
0 vote207 views1 answer
Mean absolute error percentage python
Python
0 vote212 views1 answer
Python string ignore characters
Python
21 votes193 views6 answers
Print statement in python
Python
20 votes218 views3 answers
Download image python
Python
115 votes203 views3 answers
Write txt python
Python