/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

4 votes290 views2 answers
Authentication views django
Python Django
0 vote221 views1 answer
Django template limit string length
Python Django
0 vote214 views1 answer
Date format django template filter
Python Django
0 vote221 views1 answer
Pass context data with templateview in django
Python Django
7 votes239 views5 answers
Django messages
Python Django
1 vote219 views2 answers
Check db calls django
Python Django
0 vote218 views1 answer
Python django model range validation
Python Django
0 vote239 views1 answer
What is a good django orm cookbook
Python Django
0 vote224 views1 answer
Django model get field verbose name
Python Django
0 vote225 views1 answer
Django user refistration
Python Django