/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote229 views1 answer
Item[0]: (i + 1) * 2 for i, item in (sort_loc)
Python
1 vote248 views1 answer
Django queryset multiple filters
Python
5 votes234 views3 answers
How to print hello in python
Python
0 vote222 views1 answer
Numpy declare arraylength
Python
0 vote250 views1 answer
Django model custom field
Python Django
0 vote237 views2 answers
Update a package with pip in django
Python
1 vote231 views1 answer
Images subplot python
Python
-1 vote233 views1 answer
Simple sum in python
Python
0 vote241 views1 answer
Python apt manager
Python
0 vote216 views1 answer
Python durchschnitt liste
Python