/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

5 votes171 views2 answers
How to reset username and password in django admin
Python Django
0 vote172 views1 answer
Get last save id django model
Python Django
0 vote165 views1 answer
Django rest framework not getting form
Python Django
0 vote150 views1 answer
Taggablemanager serializer django
Python Django
1 vote156 views1 answer
Django model choice field from another model
Python Django
1 vote170 views1 answer
Django clear db
Python Django
0 vote178 views1 answer
Resizing django embed player
Python Django
0 vote108 views1 answer
Create a queryset list django
Python Django
4 votes165 views2 answers
Loginrequiredmixin django
Python Django
3 votes171 views1 answer
Disable csrf for one url django
Python Django