/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

-2 votes239 views1 answer
Django modelform datetime
Python Django
0 vote278 views2 answers
Django admin image
Python Django
0 vote251 views1 answer
Django template child data in nested loop
Python Django
0 vote255 views1 answer
How to get a mock image in django?
Python Django
0 vote283 views1 answer
Django forms request
Python Django
0 vote180 views1 answer
How to resize image with pillow in django
Python Django
0 vote250 views1 answer
Use in in django while preserving order
Python Django
0 vote306 views1 answer
Basic get method in class based view django
Python Django
1 vote243 views2 answers
Django template iterate dict
Python Django
2 votes254 views1 answer
How store list in django session
Python Django