/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote132 views1 answer
Disable csrf token django
Python Django
0 vote123 views1 answer
How to instal django cities
Python Django
4 votes117 views1 answer
Django is null
Python Django
1 vote113 views1 answer
Convert pandas dataframe to django queryset
Python Django
0 vote141 views1 answer
Genrate random code in django
Python Django
2 votes80 views2 answers
Django admin actions
Python Django
0 vote148 views1 answer
Access django server from another machine
Python Django
12 votes143 views6 answers
Model in django
Python Django
3 votes133 views1 answer
Autoslugfield django 3
Python Django
0 vote132 views1 answer
Django queryset group by sum
Python Django