/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote286 views1 answer
Fetch json array from mysql django
Python Django
0 vote304 views1 answer
Django Signup view
Python Django
0 vote306 views1 answer
Django create view class
Python Django
0 vote337 views1 answer
Django create multiple objects
Python Django
0 vote329 views1 answer
Django change settings at runtime
Python Django
0 vote307 views1 answer
Django rest DjangoModelPermissions include get
Python Django
1 vote304 views1 answer
Django don't redirect on submission
Python Django
1 vote233 views1 answer
Django auto increment field
Python Django
0 vote349 views1 answer
Modules django
Python Django
0 vote326 views1 answer
Get admin url of instance django
Python Django