/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote173 views1 answer
How to specify port while running django project
Python Django
0 vote174 views2 answers
Get ContentType with django get_model
Python Django
0 vote191 views1 answer
Django clear _pycache_ command
Python Django
4 votes183 views2 answers
Django reset database
Python Django
0 vote178 views1 answer
How i dynamically populate to CORS_ALLOWED_ORIGINS in django rest framework
Python Django
0 vote207 views1 answer
(django)inorder to provide a human readable name for the model.
Python Django
4 votes171 views2 answers
Django template for range
Python Django
0 vote182 views1 answer
Django strptime
Python Django
0 vote174 views6 answers
Python django
Python Django
0 vote189 views1 answer
HTTP Error 403: Forbidden django using sendgrid
Python Django