/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote239 views1 answer
How to import flask restful using pip
Python
-1 vote231 views1 answer
Python csv writer row by row
Python
0 vote247 views1 answer
Python f string thousand separator
Python
2 votes265 views1 answer
Django flush database
Python Django
0 vote271 views1 answer
Django admin required decorator
Python Django
2 votes235 views1 answer
How to make otp generator in python
Python
0 vote232 views1 answer
Z transform in python
Python
51 votes224 views6 answers
Drop a column in pandas
Python
0 vote271 views1 answer
How to iterate through a list of numbers in python
Python
6 votes222 views1 answer
Pandas get entires that contain a string
Python