/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

6 votes265 views4 answers
Media django
Python Django
0 vote203 views1 answer
Import "whitenoise.django" could not be resolved
Python Django
0 vote207 views1 answer
Django save another class data while saving a class
Python Django
0 vote190 views1 answer
Django create view class
Python Django
0 vote184 views1 answer
Input function in django
Python Django
-1 vote193 views1 answer
Raw query in django
Python Django
1 vote199 views1 answer
How to create staff account in django
Python Django
0 vote202 views1 answer
Whitelist the ip address django
Python Django
0 vote194 views1 answer
Reverse relationship in django for one to one field for usage in Django rest serializer
Python Django
0 vote223 views2 answers
Form.as_p in django
Python Django