/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote216 views1 answer
Select Children of an Object With ForeignKey in Django?
Python Django
1 vote230 views2 answers
Django password hashing
Python Django
0 vote224 views1 answer
Set value through serializer django
Python Django
0 vote225 views2 answers
Django template date format yyyy-mm-dd
Python Django
1 vote217 views1 answer
Using regex validators in django models
Python Django
0 vote215 views2 answers
Django rest framework foreign key relation giving error in serializer
Python Django
0 vote256 views1 answer
AttributeError: 'QuerySet' object has no attribute django
Python Django
0 vote212 views1 answer
Get list of all document in django-elasticsearch-dsl
Python Django
0 vote233 views1 answer
Create a django and react readonly web app
Python Django
0 vote214 views1 answer
Import "reportlab" could not be resolved django
Python Django