/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote143 views1 answer
Django forms request
Python Django
0 vote122 views1 answer
Django create object with default today date
Python Django
0 vote130 views2 answers
Avoid bad request django
Python Django
2 votes170 views2 answers
Count gabarit django
Python Django
0 vote126 views1 answer
Extends template django
Python Django
0 vote139 views1 answer
How do i get auth user model dynamically in django?
Python Django
0 vote132 views2 answers
Displaying flash message django
Python Django
0 vote136 views1 answer
Visitor IP address django
Python Django
1 vote129 views3 answers
Management commands django
Python Django
1 vote134 views1 answer
Django get id of newly created object
Python Django