/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

-4 votes135 views5 answers
Current django version
Python Django
-1 vote154 views2 answers
How to url encode using python django
Python Django
0 vote144 views1 answer
Django get latest object
Python Django
0 vote157 views1 answer
Inspectdb django
Python Django
0 vote146 views1 answer
Cannot cast type smallint to boolean django
Python Django
0 vote137 views1 answer
How to make a nice login django form
Python Django
10 votes134 views2 answers
Adding static file and its usage in Django
Python Django
0 vote161 views1 answer
Check if a date is reached django
Python Django
0 vote159 views1 answer
What is NoReverseMatch in django?
Python Django
0 vote171 views1 answer
Else if in django template
Python Django