/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

5 votes248 views1 answer
Check django object exists
Python Django
3 votes279 views1 answer
Disable csrf for one url django
Python Django
0 vote259 views1 answer
Reading json without using relative path in django
Python Django
2 votes282 views1 answer
Truncate templat tag django
Python Django
0 vote256 views1 answer
Django from
Python Django
0 vote277 views1 answer
How to get the current url path in django template
Python Django
0 vote264 views1 answer
Check permissions django template
Python Django
0 vote272 views1 answer
Django on delete set default
Python Django
1 vote280 views1 answer
Django queryset group by count
Python Django
0 vote245 views1 answer
Sending email in django
Python Django