/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote366 views1 answer
Related name django
Python Django
0 vote323 views1 answer
Django set boolean field value in view
Python Django
0 vote407 views1 answer
Overriding update in serializer django
Python Django
0 vote385 views1 answer
Select default option django form
Python Django
0 vote384 views1 answer
Get last save id django model
Python Django
0 vote394 views1 answer
How to insert a placeholder text in django modelform
Python Django
0 vote344 views2 answers
Stable version of django
Python Django
30 votes484 views6 answers
How to create a superuser in django
Python Django
0 vote388 views1 answer
?: (admin.W411) 'django.template.context_processors.request' must be enabled in DjangoTemplates (TEMPLATES) in order to use the admin navigation sidebar.
Python Django
3 votes456 views1 answer
Django session expire time
Python Django