Why are these variables being inserted into the wrong part of my node.js sql query?

Question

I am trying to run an sql query using Node.js, using a prepared statement, as follows:

sql = "UPDATE users SET ? WHERE user_id = ?"
        con.query(sql, {current_quiz: quizId, user_id: selected[0]},
        function(result, err) {
          if(err) throw err
          console.log(result)
        })

However the result returns an error, because the code is inserting an extra column into the query:

sql: 'UPDATE users SET `current_quiz` = 1, `user_id` = \'1\' WHERE user_id = ?'

What can I do to ensure that selected[0] is used by the user_id= part of the statement, rather than added as an extra column/value pair?

O. Jones · Accepted Answer · 2020-04-04 12:35:15Z

1

Use an array, not an object, to give your parameters to a query like that.

const sql =
 'UPDATE users SET current_quiz = ? WHERE user_id = ?'
con.query(sql, [quizId, selected[0]] ...

The query() method takes them in order.

answered Apr 4, 2020 at 12:35

O. Jones

109k17 gold badges134 silver badges187 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Why are these variables being inserted into the wrong part of my node.js sql query?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related