/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

1 vote303 views1 answer
Filter foreign fileds django_filters
Python Django
0 vote301 views1 answer
Api view wrapper django
Python Django
0 vote327 views1 answer
How to get the current url path in django template
Python Django
-1 vote308 views1 answer
Django filter on related field
Python Django
4 votes227 views1 answer
Django listview
Python Django
0 vote303 views1 answer
Default ordering django
Python Django
2 votes309 views1 answer
Django group with permission
Python Django
0 vote316 views2 answers
Django ajax body to json
Python Django
0 vote266 views2 answers
Deploy django with nginx and gunicorn
Python Django
0 vote341 views1 answer
Back button django template
Python Django