/Python/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote305 views1 answer
Set ttk combobox to readonly
Python
0 vote293 views1 answer
Pandas dataframe unique multiple columns
Python
0 vote320 views1 answer
Normalize rows in matrix numpy
Python
-1 vote292 views2 answers
String template python
Python
1 vote400 views1 answer
Insert data in django models
Python Django
133 votes303 views6 answers
Python input
Python
16 votes308 views3 answers
Python split range equally
Python
0 vote299 views1 answer
Tkinter text blurry
Python
1 vote411 views5 answers
Java treemap
Python
0 vote331 views1 answer
Numpy documentation realpython
Python