/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote169 views1 answer
Python check column conditions
Python
0 vote162 views1 answer
Check if a numpy array contains only 1's python
Python
1 vote174 views1 answer
Matplotlib wrap title
Python
6 votes157 views2 answers
Python debugger online
Python
13 votes172 views4 answers
Python get screen size
Python
1 vote146 views1 answer
Skimage image read
Python
4 votes180 views4 answers
Flash messages django
Python
2 votes163 views1 answer
Pass python parameters via cmd
Python
0 vote172 views2 answers
Python - create frequency table between two columns
Python
0 vote190 views1 answer
Repetition of word in python
Python