/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

2 votes275 views1 answer
Django and react url conflict
Python Django
31 votes375 views6 answers
Django admin create superuser
Python Django
0 vote286 views1 answer
Django not saving images forms
Python Django
1 vote254 views1 answer
Django ckeditor not working
Python Django
0 vote296 views1 answer
Django add to database
Python Django
3 votes308 views1 answer
Disable csrf for one url django
Python Django
13 votes293 views6 answers
Django orm
Python Django
1 vote250 views1 answer
Django template decimal places
Python Django
1 vote282 views1 answer
How to send json in django response
Python Django
0 vote305 views1 answer
Django admin.py date format
Python Django