/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

-4 votes335 views4 answers
Latest django version
Python Django
1 vote396 views2 answers
No changes detected in app django
Python Django
2 votes356 views2 answers
Create django user command line
Python Django
3 votes314 views1 answer
Static root django
Python Django
0 vote361 views1 answer
The webpage at http://127.0.0.1:8000/ might be temporarily down or it may have moved permanently to a new web address. django
Python Django
-2 votes334 views4 answers
Django form datepicker
Python Django
16 votes375 views6 answers
Django forms
Python Django
0 vote345 views1 answer
Using django model translation with django rest
Python Django
0 vote358 views2 answers
Generate-thumbnails-in-django-with-pil
Python Django
2 votes396 views3 answers
Django queryset to list
Python Django