/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

2 votes159 views1 answer
Django register models
Python Django
0 vote172 views1 answer
What is a good django orm cookbook
Python Django
4 votes157 views2 answers
Primary key django model
Python Django
2 votes157 views2 answers
Django exclude queryset
Python Django
0 vote150 views1 answer
Django url patterns static
Python Django
0 vote155 views1 answer
Dockerize django app
Python Django
0 vote150 views1 answer
Migrate using other database django
Python Django
0 vote148 views1 answer
Django create object with default today date
Python Django
2 votes253 views2 answers
Or in django query
Python Django
1 vote151 views1 answer
Django ckeditor not working
Python Django