/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote251 views2 answers
Add new row to numpy array
Python
0 vote260 views1 answer
R Return each result with an index
Python
0 vote246 views1 answer
Postgresql.org Currency data type
Python
0 vote250 views1 answer
Turn off warning when import python
Python
0 vote283 views1 answer
How to add column to heroku postgres in my django app
Python Django
0 vote243 views1 answer
How to call any function with it name as a string
Python
0 vote241 views1 answer
Matplotlib inside Jupyter | Jupyter generate graphs.
Python
12 votes266 views2 answers
For loop with float python
Python
1 vote263 views2 answers
Python any in string
Python
-1 vote271 views1 answer
Django email verification
Python