/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

67 votes219 views4 answers
List slicing reverse python
Python
0 vote239 views1 answer
Form action in django
Python
21 votes229 views2 answers
How to update python
Python
0 vote202 views1 answer
''' python '''
Python
2 votes219 views3 answers
Scatter plot actual vs predicted python
Python
3 votes253 views1 answer
Disable csrf for one url django
Python Django
0 vote209 views1 answer
Pandas df filter by time hour
Python
2 votes218 views2 answers
Copy image from one folder to another in python
Python
0 vote235 views1 answer
Pycord discord discordpy get total slash commands and total commands regestered in your bot
Python
1 vote258 views1 answer
How to open cmd at specific location usng python
Python