/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote298 views1 answer
How to add phone number to django user model
Python Django
0 vote295 views2 answers
Operator in django query
Python Django
2 votes313 views1 answer
Django get current date
Python Django
-2 votes279 views4 answers
Django form datepicker
Python Django
1 vote349 views1 answer
Django __str__ self multiple
Python Django
5 votes342 views2 answers
Django connexion session time
Python Django
0 vote299 views1 answer
Django raise 404
Python Django
0 vote309 views1 answer
Filter outside queryset in list django
Python Django
0 vote304 views2 answers
Allow x_frame_options django
Python Django
2 votes267 views2 answers
What is role of ALLOWED_HOSTs in Django
Python Django