/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote378 views1 answer
Unique file name in django
Python Django
0 vote369 views1 answer
App is not a registered namespace django
Python Django
0 vote395 views1 answer
How do i get auth user model dynamically in django?
Python Django
4 votes380 views2 answers
How to make django model field case insensitive
Python Django
5 votes354 views2 answers
Forgot django admin password
Python Django
0 vote376 views1 answer
Django Signup urls.py
Python Django
0 vote345 views1 answer
Django how to create superuser if does not exists on migration
Python Django
1 vote414 views1 answer
Getting multiple selected value django
Python Django
2 votes330 views2 answers
Search in django
Python Django
0 vote341 views1 answer
Django template render dict
Python Django