where_raw bindings parameter not used

[circulon]

Migrated from: MasoniteFramework/orm#920
Original author: @dapicester
Originally opened: 2025-02-20
Original state: closed

---

When using .where_raw() the bindings are not used, resulting in a QueryException.

Here is a simplified example:

query = User.where_raw('name = ?', ('paolo',))
query.to_sql()  
# 'SELECT * FROM "users" WHERE name = ?'
query.all()
# QueryException: syntax error at end of input
# LINE 1: SELECT * FROM "users" WHERE category = ?

It seems that the SQL does not use the given bindings.

Similar to #267, but the problem is still present.
I am using `masonite-orm==2.24.0

[circulon]

Original comment by: @chai-masalla on 2025-02-20

---

which engine are you using?
it works for me:

>>> query = User.where_raw('name = ?', ('Joe',))
>>> query.to_sql()
'SELECT * FROM "users" WHERE name = ? AND "users"."deleted_at" IS NULL'
>>> query.all()
[{"id": 1, "name": "Joe", "email": "user@example.com", "remember_token": "...", "phone": null, "verified_at": null, "created_at": "2025-02-19T12:46:41+00:00", "updated_at": "2025-02-19T12:54:07+00:00", "deleted_at": null}]

[circulon]

Original comment by: @dapicester on 2025-02-21

---

I am using postgres.

[circulon]

Original comment by: @chai-masalla on 2025-02-23

---

please try with query = User.where_raw("name = '?'", ('paolo',)) (note the single apostrophe around the qmark)
because the where_raw takes your string "as-is" and not compile anything I'm not sure it considered a bug

(for future reference: in PostgresConnection.py we replacing '?' by %s)

[circulon]

Original comment by: @dapicester on 2025-02-24

---

Thanks! I found that both of these work:

User.where_raw("name = '?'", ('paolo',))
User.where_raw("name = %s", ('paolo',))

Let me suggest to mention this somewhere in the docs.