/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

9 votes115 views3 answers
Save model pickle
Python
1 vote121 views2 answers
Countplot in pandas
Python
0 vote114 views1 answer
Python discord if == emoji not working
Python
1 vote113 views3 answers
Python call function by string
Python
3 votes109 views1 answer
Matplotlib y axis log scale
Python
0 vote124 views1 answer
Doormat pattern
Python
14 votes130 views4 answers
Django delete
Python Django
65 votes117 views4 answers
Python csv dict reader
Python
0 vote108 views1 answer
Append to a ldictionary value list
Python
7 votes122 views1 answer
Python how to run terminal command
Python