/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

2 votes395 views1 answer
Django template tag to display current year
Python Django
0 vote323 views2 answers
Django get all models
Python Django
0 vote435 views1 answer
Rebuild database from zero django postgres
Python Django
2 votes346 views2 answers
Create django user command line
Python Django
0 vote365 views1 answer
Bootstrap 5 in Django
Python Django
0 vote359 views1 answer
Template tag django
Python Django
0 vote375 views1 answer
Include app in django project
Python Django
1 vote343 views2 answers
Django sum get 0 if none
Python Django
1 vote311 views1 answer
Ls.ProgrammingError: permission denied for table django_migrations
Python Django
0 vote350 views1 answer
Import "reportlab" could not be resolved django
Python Django