/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote213 views1 answer
Change date format python code
Python
2 votes229 views8 answers
Codegrepper
Python
2 votes230 views2 answers
Python __repr__
Python
0 vote222 views1 answer
Django change foreign key
Python
0 vote246 views1 answer
Set list start at 1 python
Python
1 vote180 views1 answer
Django auto increment field
Python Django
0 vote257 views1 answer
Torch.cuda.randn
Python
0 vote240 views1 answer
Discord command addrole python
Python
0 vote227 views1 answer
How to convert into grayscale opencv
Python
-1 vote248 views6 answers
List comprehension python
Python