/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

0 vote351 views2 answers
Operator in django query
Python Django
3 votes323 views2 answers
Postgres Database Django
Python Django
1 vote386 views2 answers
How to get user id django
Python Django
0 vote379 views1 answer
How to log errors while debug is false in django
Python Django
2 votes350 views1 answer
How do I mock an uploaded file in django?
Python Django
0 vote353 views1 answer
Django model make the field caseinsensitive
Python Django
0 vote323 views1 answer
Slug in redirect django
Python Django
0 vote368 views1 answer
Django queryset group by sum
Python Django
1 vote372 views3 answers
Making ckeditor django responsive
Python Django
0 vote364 views1 answer
Check this id exist in database django
Python Django