/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

11 votes176 views3 answers
How to strip white space of text in python?
Python
0 vote180 views1 answer
How to Set Axis Range (xlim, ylim) in Matplotlib
Python
2 votes177 views6 answers
Variable python
Python
75 votes170 views6 answers
Sort dictionary python
Python
0 vote173 views1 answer
How to have requirement file in python for libs
Python
9 votes196 views2 answers
Default flask app
Python Flask
0 vote186 views1 answer
How to add window background in pyqt5
Python
0 vote183 views1 answer
Python second interval
Python
0 vote198 views1 answer
Get version of cuda in pytorch
Python
3 votes178 views2 answers
How to find if user input is lower case or upper case in python
Python