/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

3 votes188 views2 answers
Django radio button
Python Django
0 vote183 views1 answer
Django command to fetch all columns of a table
Python Django
3 votes191 views2 answers
Django change user password
Python Django
4 votes126 views2 answers
Check installed django version
Python Django
2 votes285 views3 answers
No such table django
Python Django
0 vote183 views2 answers
Django query string route
Python Django
2 votes175 views1 answer
Django create model from dictionary
Python Django
0 vote202 views1 answer
Exception Type: AssertionError Exception Value: Expected a `Response`, `HttpResponse` or `HttpStreamingResponse` to be returned from the view, but received a `<class 'django.db.models.query.QuerySet'>`
Python Django
0 vote193 views1 answer
Get a list of ids from queryset django
Python Django
1 vote173 views1 answer
Django change value and save model object
Python Django