/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote216 views2 answers
Filter titlecase django
Python Django
0 vote161 views1 answer
Django iterating through objects
Python Django
2 votes239 views5 answers
Django documentation
Python Django
0 vote213 views1 answer
Django update field after save
Python Django
0 vote204 views1 answer
Django.core.exceptions.ImproperlyConfigured: Application labels aren't unique, duplicates: auth
Python Django
0 vote202 views1 answer
Django url patterns static
Python Django
2 votes225 views2 answers
Django request.data
Python Django
0 vote216 views1 answer
Heroku how to access config vars django
Python Django
0 vote222 views1 answer
Delete migrations django and start over deployment heroku
Python Django
0 vote224 views1 answer
How to populate an image to template in django from views
Python Django