[Solved] Which of the following is the correct way to safely filter users by username using Django ORM? — Ans: User.objects.filter(username=user_input) | Django

Django - Security Best Practices

Which of the following is the correct way to safely filter users by username using Django ORM?

AUser.objects.filter(f"username = '{user_input}'")

BUser.objects.raw(f"SELECT * FROM users WHERE username = '{user_input}'")

CUser.objects.filter(username=user_input)

DUser.objects.raw("SELECT * FROM users")

Step-by-Step Solution

Solution:

Step 1: Identify safe ORM filtering syntax
filter() with keyword arguments safely handles user_input.
Step 2: Analyze unsafe options
Raw queries with string interpolation risk injection; filter() with string is invalid syntax.
Final Answer:
User.objects.filter(username=user_input) -> Option C
Quick Check:
Safe filtering syntax = User.objects.filter(username=user_input) [OK]

Quick Trick: Use keyword args in filter() for safety [OK]

Common Mistakes:

MISTAKES

Master "Security Best Practices" in Django

9 interactive learning modes - each teaches the same concept differently

More Django Quizzes

Which of the following is the correct way to safely filter users by username using Django ORM?