/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

3 votes289 views1 answer
Drop all characters after a character in python
Python
-1 vote283 views1 answer
Usage code grepper
Python
0 vote264 views1 answer
Semicircle
Python
0 vote282 views1 answer
Timedelta
Python
0 vote319 views1 answer
Print format round python
Python
2 votes317 views2 answers
Can you edit string.punctuation
Python
1 vote294 views1 answer
Show aruco marker axis opencv python
Python
0 vote284 views1 answer
Python list inster 0
Python
1 vote279 views1 answer
Localhost postgres settings django
Python Django
0 vote309 views1 answer
Get rid of axes numbers matplotlib
Python