title: SQL injection on django app
body: <p>I am writing a django app and I know it handles string escaping and all to prevent sql injections in the queryset ( <a href="https://docs.djangoproject.com/en/dev/topics/security/" rel="nofollow">https://docs.djangoproject.com/en/dev/topics/security/</a> ). </p>
  
  <p>Out of curiosity, I was wondering if there are still ways to perform sql injections on django apps? What would be an example?</p>