Breaking News: Grepper is joining You.com. Read the official announcement!

django custom query

MahmoudNoor answered on July 26, 2022 Popularity 8/10 Helpfulness 5/10

answer django custom query

django custom query

Comment

# to protect against SQL injection, use parameters and don’t include quotes around the %s placeholders. as shown below #

### using Manager.Raw() ###
class Person(models.Model):
  first_name = models.CharField(...)
  last_name = models.CharField(...)
  birth_date = models.DateField(...)
  
>>> lname = 'Doe'
>>> Person.objects.raw('SELECT * FROM myapp_person WHERE last_name = %s', [lname])

### Direct SQL ###
from django.db import connection

def my_custom_sql(self):
    with connection.cursor() as cursor:
        cursor.execute("UPDATE bar SET foo = 1 WHERE baz = %s", [self.baz])
        cursor.execute("SELECT foo FROM bar WHERE baz = %s", [self.baz])
        row = cursor.fetchone()

    return row

### Direct SQL Multiple DBs ###
from django.db import connections

def my_custom_sql(self):
	with connections['my_db_alias'].cursor() as cursor:
      	cursor.execute("UPDATE bar SET foo = 1 WHERE baz = %s", [self.baz])
        cursor.execute("SELECT foo FROM bar WHERE baz = %s", [self.baz])
        row = cursor.fetchone()

Popularity 8/10 Helpfulness 5/10 Language python

Source: docs.djangoproject.com

Tags: django python

Link to this answer
Share Copy Link

Contributed on Jul 26 2022

MahmoudNoor

0 Answers Avg Quality 2/10

django custom query

Contents

More Related Answers

django custom query

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.