/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

2 votes338 views1 answer
Torch device
Python
1 vote340 views2 answers
Python print utf-8
Python
0 vote347 views1 answer
Create matrix with complex python
Python
0 vote340 views3 answers
Python remove text between parentheses
Python
19 votes330 views2 answers
Python string cut first n characters
Python
62 votes334 views6 answers
Python for loop with index
Python
0 vote346 views1 answer
Python image to video
Python
3 votes338 views3 answers
Spacex
Python
1 vote335 views1 answer
Logging in with selenium
Python
1 vote317 views1 answer
A function to create a null correlation heatmap in python
Python