/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote150 views1 answer
Django.core.exceptions.ImproperlyConfigured: Application labels aren't unique, duplicates: auth
Python Django
3 votes152 views2 answers
Postgres Database Django
Python Django
0 vote102 views1 answer
Django auto increment field not primary key
Python Django
0 vote170 views1 answer
Float number field django models
Python Django
0 vote160 views1 answer
?: (admin.W411) 'django.template.context_processors.request' must be enabled in DjangoTemplates (TEMPLATES) in order to use the admin navigation sidebar.
Python Django
0 vote196 views4 answers
"%(class)s" in django
Python Django
1 vote149 views1 answer
Unresolved reference 'django'
Python Django
0 vote179 views1 answer
What is a good django orm cookbook
Python Django
0 vote168 views1 answer
Django update replace regex
Python Django
0 vote176 views1 answer
Django model plural
Python Django