/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote263 views1 answer
Static Assets in Django
Python Django
2 votes234 views1 answer
Django static media
Python Django
3 votes227 views2 answers
Django postgres connection
Python Django
6 votes262 views3 answers
Login system in django
Python Django
0 vote244 views1 answer
?: (admin.W411) 'django.template.context_processors.request' must be enabled in DjangoTemplates (TEMPLATES) in order to use the admin navigation sidebar.
Python Django
0 vote236 views1 answer
Difference in django project view and app view
Python Django
0 vote256 views1 answer
Django charfield force lowercase
Python Django
0 vote231 views1 answer
Django pre_save get old instance
Python Django
0 vote238 views1 answer
Django rest framework not getting form
Python Django
0 vote229 views1 answer
Filter outside queryset in list django
Python Django