1. Why are you creating models with the ORM (via a Model subclass),
then using raw SQL instead of the ORM to manipulate the database?

2. Why are you overriding the primary key just to replace it with the same type?

3. Your view allows for SQL injection errors -- one of the things the
ORM protects you from.

In other words, don't do this. It's bad for security and it's
confusing (to you) to mix the ORM and raw SQL, considering all the
plumbing built into the ORM that you aren't familiar with.

Use the ORM and it'll be a lot easier, work properly, and protect you
from SQL injection.

Shawn

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com.
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en.

Reply via email to