/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

3 votes134 views2 answers
Django postgres connection
Python Django
0 vote142 views1 answer
Get ip address in django
Python Django
0 vote125 views1 answer
Django file field from base64
Python Django
0 vote134 views1 answer
Show post id on django admin interface
Python Django
0 vote127 views1 answer
India states django choices
Python Django
0 vote122 views1 answer
Check django version in your system
Python Django
0 vote133 views1 answer
Styling filter form django
Python Django
4 votes135 views2 answers
Django how to delete a db field
Python Django
0 vote158 views1 answer
Django connect to a db on heroku
Python Django
1 vote132 views1 answer
Django don't redirect on submission
Python Django