/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

2 votes320 views1 answer
What is a cube minus b cube
Python
18 votes320 views5 answers
Python remove punctuation
Python
0 vote320 views1 answer
How to get the current url path in django template
Python
22 votes282 views2 answers
Range() function
Python
0 vote335 views1 answer
PHP echo multiple lines example Using escape sequences
Python
2 votes336 views1 answer
Sess.run tensorflow
Python
21 votes332 views6 answers
Python linear regression
Python
15 votes321 views2 answers
How to get user ip in python
Python
0 vote321 views2 answers
Aminul
Python
7 votes314 views2 answers
Python divmod
Python