/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote421 views1 answer
Django update increment
Python Django
0 vote324 views1 answer
Def plot_null_matrix(df, figsize=(18,15)): # initiate the figure plt.figure(figsize=figsize) # create a boolean dataframe based on whether values are
Python
0 vote345 views2 answers
How to run turtle in python
Python
0 vote368 views1 answer
Python check if hotkey pressed
Python
0 vote358 views2 answers
How to read mysql table in python
Python
0 vote336 views1 answer
Python import only one function
Python
1 vote335 views2 answers
Np.transpose(x) array([[0, 2], [1, 3]])
Python
0 vote346 views1 answer
Git ignore everything but python files
Python
0 vote431 views1 answer
Using a generic exception block
Python
0 vote364 views1 answer
Dataframe how to substruct 2 dates
Python