/Python/Django/Django raw without sql injection

Django raw without sql injection

# You MUST pass the parameters list to avoid SQL Injection
# https://docs.djangoproject.com/en/3.2/topics/db/sql/#passing-parameters-into-raw

>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

Source: docs.djangoproject.com

Similar codes

4 votes246 views2 answers
Django template for range
Python Django
6 votes225 views3 answers
Django filter install
Python Django
17 votes295 views6 answers
Installing django
Python Django
2 votes286 views2 answers
Python django query
Python Django
4 votes244 views2 answers
How to make django model field case insensitive
Python Django
1 vote221 views2 answers
Zip django template
Python Django
0 vote257 views1 answer
Django dumpdata specific app
Python Django
0 vote243 views1 answer
Django loop through form errors
Python Django
0 vote224 views1 answer
Api view wrapper django
Python Django
0 vote262 views1 answer
Include app in django project
Python Django