/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote277 views1 answer
Flask - store object directly in a session [duplicate]
Python
0 vote265 views1 answer
How to set conditionlally keys in python
Python
0 vote295 views1 answer
Custom auth django channels
Python Django
0 vote284 views1 answer
How to check if all values in list are equal python
Python
4 votes290 views5 answers
Python booleans
Python
0 vote315 views1 answer
Access host database django docker
Python Django
0 vote249 views1 answer
Python floor float
Python
6 votes269 views4 answers
Python transpose list of lists
Python
5 votes271 views3 answers
Text to binary python
Python
15 votes261 views3 answers
Python get input from console
Python