/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote292 views2 answers
Django APIView Pagination
Python Django
0 vote285 views1 answer
Dockerize django app
Python Django
1 vote293 views1 answer
Django jinja subset string
Python Django
0 vote299 views1 answer
Foreign key django createview
Python Django
1 vote324 views1 answer
Getting multiple selected value django
Python Django
1 vote270 views1 answer
Permanent redirect django
Python Django
1 vote270 views1 answer
Number field in django
Python Django
0 vote284 views1 answer
Form valid django created by
Python Django
1 vote282 views1 answer
Django boilerplate command
Python Django
2 votes347 views1 answer
Django rest framework viewset perform_update
Python Django