/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote193 views1 answer
Minimal requirements.txt django
Python Django
1 vote180 views2 answers
Django queryset unique values
Python Django
0 vote184 views1 answer
Extends template django file system
Python Django
1 vote182 views1 answer
Django making a custom 403 page
Python Django
1 vote167 views1 answer
Insert data in django models
Python Django
0 vote229 views9 answers
Django recapcha
Python Django
2 votes166 views1 answer
Set http response content type django
Python Django
1 vote161 views1 answer
Django m2m .add
Python Django
2 votes179 views1 answer
Django get current date
Python Django
14 votes194 views6 answers
Install django
Python Django