/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote273 views1 answer
Flash not defined python flask
Python
1 vote264 views1 answer
Count missing values groupby
Python
0 vote275 views1 answer
Add system path python jupytre
Python
0 vote275 views1 answer
Indent python code
Python
61 votes260 views3 answers
How to make python remove the duplicates in list
Python
45 votes258 views1 answer
How to turn python vs code into a executable
Python
0 vote285 views2 answers
The module in NAME could not be imported: django.contrhtmlib.auth.password_validation.UserAttributeSimilarityValidator. Check your AUTH_PASSWORD_VALIDATORS setting.
Python
2 votes253 views1 answer
Selenium zoom out python
Python
0 vote282 views1 answer
Merge the values for each key using an associative and commutative reduce function.
Python
0 vote276 views1 answer
Python thunks
Python