/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote371 views3 answers
How to create a sub project in django
Python Django
1 vote313 views1 answer
Use django taggit in template
Python Django
1 vote276 views1 answer
Django pass data between views
Python Django
2 votes346 views1 answer
Django get current date
Python Django
2 votes367 views2 answers
Count gabarit django
Python Django
2 votes370 views1 answer
Django template tag to display current year
Python Django
0 vote312 views1 answer
Django rest framework encrypt passwors
Python Django
1 vote310 views2 answers
Management command in django
Python Django
0 vote336 views1 answer
Autofield in django
Python Django
2 votes340 views2 answers
Django regexvalidator example
Python Django