/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote433 views1 answer
Df.fillna("tagline",inplace=True) in jupyter notebook
Python
0 vote348 views1 answer
How to write flow of execution in python
Python
0 vote342 views1 answer
Display all resources in table pandas
Python
4 votes343 views2 answers
View all columns in pandas dataframe
Python
34 votes311 views6 answers
Class python example
Python
2 votes341 views1 answer
How to save bulk create in django
Python
0 vote352 views1 answer
Reverse relationship in django for one to one field for usage in Django rest serializer
Python
0 vote341 views1 answer
Autoscrapper installation
Python
0 vote332 views0 answer
Python
13 votes347 views1 answer
Configure funCtion in tkinter
Python