/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote162 views1 answer
How to work with django ornm __in
Python Django
0 vote177 views1 answer
Django retrieveupdatedestroyapiview
Python Django
0 vote188 views1 answer
Minimal requirements.txt django
Python Django
0 vote180 views1 answer
Are there learning activities for django-debug-toolbar
Python Django
0 vote178 views1 answer
Settings.debug django
Python Django
0 vote190 views2 answers
Createview django
Python Django
0 vote163 views1 answer
Django get latest object
Python Django
7 votes172 views2 answers
Ckeditor django
Python Django
0 vote158 views1 answer
Django add queury parameters to reverse
Python Django
1 vote180 views4 answers
Join tables in django orm
Python Django