/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote232 views1 answer
Re_path(r'^logout/$',views.logout, {"next_page":'/'},name="logout"), AttributeError: module 'django.contrib.auth.views' has no attribute 'logout'
Python Django
0 vote278 views1 answer
Django edit model without loading from db
Python Django
0 vote226 views1 answer
Django app directory
Python Django
1 vote248 views1 answer
How to create staff account in django
Python Django
0 vote237 views2 answers
How to use django-filters with viewset
Python Django
0 vote278 views1 answer
Django database connection isn't set to UTC postgresql
Python Django
0 vote211 views1 answer
Register template tag django
Python Django
0 vote267 views1 answer
Django graphene without model
Python Django
9 votes240 views2 answers
Django import Q
Python Django
0 vote255 views1 answer
Request.build_absolute_uri django
Python Django