/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

9 votes199 views1 answer
Delete model object django
Python Django
1 vote238 views2 answers
Redirect to the same page django
Python Django
0 vote217 views1 answer
Get list of all document in django-elasticsearch-dsl
Python Django
4 votes205 views1 answer
Django objects.create()
Python Django
0 vote194 views1 answer
Onetoone vs foreign key django
Python Django
6 votes209 views1 answer
Django model form
Python Django
0 vote237 views1 answer
Django check user admin
Python Django
0 vote209 views1 answer
Django cms api create page
Python Django
0 vote192 views1 answer
Cant use foreign key in list_display django
Python Django
1 vote231 views1 answer
Django text area limit characters
Python Django