/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote197 views5 answers
How to install django in virtual environment in ubuntu
Python Django
3 votes199 views2 answers
Change django administration title
Python Django
3 votes182 views1 answer
Django import model from another app
Python Django
0 vote278 views5 answers
Django-tool-bar
Python Django
0 vote212 views1 answer
QuizListView login required django
Python Django
0 vote189 views1 answer
Django user refistration
Python Django
0 vote154 views1 answer
Django http response 204
Python Django
11 votes200 views3 answers
Django q filter
Python Django
0 vote173 views1 answer
Django url patterns static
Python Django
15 votes233 views6 answers
Django install
Python Django