/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

30 votes256 views3 answers
Django createsuperuser
Python Django
10 votes197 views2 answers
Django delete object
Python Django
1 vote219 views1 answer
Difference between get and filter in django
Python Django
6 votes206 views2 answers
Migrate data django
Python Django
0 vote185 views1 answer
Django create object with default today date
Python Django
0 vote210 views1 answer
Django.com
Python Django
0 vote152 views1 answer
Django template date format yyyy-mm-dd
Python Django
4 votes212 views1 answer
Create or update django models
Python Django
0 vote218 views1 answer
Or operator in django queryset
Python Django
0 vote183 views1 answer
Csrf token fetch django
Python Django