/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

13 votes272 views2 answers
Slug
Python
10 votes269 views4 answers
How to know if python is 64 or 32 bit
Python
0 vote275 views1 answer
How to union value without the same value in numpy
Python
0 vote299 views1 answer
Django form label in template
Python Django
7 votes281 views3 answers
If in df.columns
Python
0 vote271 views1 answer
Checking if the variable storing same value in python
Python
-1 vote260 views1 answer
ModuleNotFoundError: No module named 'scipy'
Python
1 vote271 views1 answer
Run django app locally
Python
91 votes304 views6 answers
Python for in
Python
1 vote326 views2 answers
No changes detected in app django
Python Django