/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

31 votes304 views6 answers
Django admin create superuser
Python Django
0 vote254 views1 answer
Django force download file
Python Django
0 vote231 views1 answer
Django created at field
Python Django
1 vote273 views1 answer
How to add an active class to current element in navbar in django
Python Django
1 vote259 views1 answer
How to migrate from sqlite to postgresql django
Python Django
0 vote256 views1 answer
Cannot cast type smallint to boolean django
Python Django
4 votes258 views1 answer
What is cleaned data in django
Python Django
0 vote273 views1 answer
Django oauth toolkit permanent access token
Python Django
5 votes233 views2 answers
Allauth django
Python Django
0 vote254 views1 answer
Form rendering options in django
Python Django