/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote380 views1 answer
Django from
Python Django
0 vote349 views1 answer
Add to manytomany key django stackoverflow
Python Django
0 vote372 views5 answers
Django-tool-bar
Python Django
1 vote387 views1 answer
Django queryset multiple filters
Python Django
0 vote355 views1 answer
Django populate form from database
Python Django
0 vote363 views1 answer
Delete file in django terminal
Python Django
28 votes538 views3 answers
Django abstractuser
Python Django
-1 vote356 views2 answers
Django cleanup
Python Django
0 vote332 views1 answer
Delete all historical data django simple history
Python Django
1 vote400 views1 answer
Django foreign key error Cannot assign must be a instance
Python Django