Django注意事项

Posted 2021-02-14 neroi

执行原生SQL：

原生SQL

1         from django.db import connection, connections
2         cursor = connection.cursor()
3         cursor.execute(
4             """select %%s from tb""",[user.nid, ])
5         result = cursor.fetchall()

 赋值放在第二个参数，防止SQL注入