nodejs and pg module - query syntax

Question

I'm using nodejs 0.10.12 and the pg module, version 2.2.0.

Now, on the server side I have a code like

var ja=message.utf8Data;
var query = client.query("SELECT pins.p_name FROM pins WHERE  p_id = ja");

ja is a var, representing an int,came from the client side, through websockets. I'm trying to use it to the query but I can not. I can not find the right syntax to make it work. The query and the code in general work fine, if I replace ja in the query with , for example, 64. I tried syntax like p_id=(ja) but I keep getting errors like undefiend or ja is not a column in a table.

What is the rigth syntax?

Thanks

You need to use parameters.

SLaks
– SLaks

2013-07-18 00:13:48 +00:00
Commented Jul 18, 2013 at 0:13 — SLaks
– SLaks, Commented Jul 18, 2013 at 0:13

Russbear · Accepted Answer · 2013-07-18 04:53:08Z

1

client.query("SELECT pins.p_name FROM pins WHERE p_id ="+ja);

Should do the trick. Since it's coming in over a socket you might want to do some sanitization of the input to prevent injection attacks. The mysql-node module has a good function for that

  connection.escape()

Or alternatively,

connection.query('SELECT ? FROM myTable',[ja],function(err,rows) {});

answered Jul 18, 2013 at 4:53

Russbear

1,2611 gold badge11 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

nodejs and pg module - query syntax

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related