/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote192 views1 answer
Extra import on django
Python Django
2 votes221 views2 answers
Django queryset is in list
Python Django
3 votes185 views2 answers
Postgres Database Django
Python Django
1 vote176 views3 answers
Django reverse
Python Django
-1 vote186 views1 answer
ImportError: cannot import name 'FieldDoesNotExist' from 'django.db.models.fields' (C:\Users\Admin\AppData\Local\Programs\Python\Python39\lib\site-packages\django\db\models\fields\__init__.py)
Python Django
0 vote219 views1 answer
App is not a registered namespace django
Python Django
0 vote179 views2 answers
Django form formatting
Python Django
0 vote187 views1 answer
Check django channels with redis setup
Python Django
4 votes221 views2 answers
Change django admin title
Python Django
0 vote261 views1 answer
Access kwargs in template django
Python Django