/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote173 views1 answer
Django.db.models avg
Python Django
0 vote222 views1 answer
How to export schema in graphene django
Python Django
-1 vote183 views1 answer
Email validation using django
Python Django
0 vote192 views1 answer
Error 302 heroku django
Python Django
0 vote190 views1 answer
User passes test django
Python Django
-1 vote183 views1 answer
Raw query in django
Python Django
0 vote187 views1 answer
Show post id on django admin interface
Python Django
0 vote188 views1 answer
Plural name django
Python Django
0 vote173 views1 answer
DJANGO model instance get by variable
Python Django
0 vote205 views1 answer
Generate 50 characters long for django
Python Django