/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

3 votes348 views1 answer
Disable csrf for one url django
Python Django
1 vote343 views1 answer
Handle queries in ListView django
Python Django
14 votes374 views6 answers
Install django
Python Django
0 vote333 views2 answers
User logout in django rest framework
Python Django
0 vote318 views3 answers
Removing duplicates from django models data
Python Django
4 votes362 views1 answer
Django slug int url mapping
Python Django
3 votes340 views2 answers
Django change user password
Python Django
1 vote364 views1 answer
Django class based views ListView
Python Django
0 vote330 views1 answer
Read api from django
Python Django
0 vote371 views1 answer
Decode in django templates
Python Django