/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote263 views1 answer
MULTIPLE Model Search in Django rest framework
Python Django
-2 votes215 views1 answer
Django e docker
Python Django
0 vote212 views1 answer
Django datepicker mindate and maxdate
Python Django
0 vote210 views1 answer
405 status code django
Python Django
0 vote232 views1 answer
Iniciar servidor en Django
Python Django
1 vote250 views2 answers
Redirect to the same page django
Python Django
0 vote220 views1 answer
Django date grater
Python Django
7 votes233 views5 answers
Django messages
Python Django
0 vote216 views1 answer
Django get latest object
Python Django
0 vote219 views1 answer
Django queryset to form
Python Django