demo_db_where_escape.js:
var mysql = require('mysql'); var con = mysql.createConnection({ host: "localhost", user: "myusername", password: "mypassword", database: "mydb" }); con.connect(function(err) { if (err) throw err; var adr = 'Mountain 21'; var sql = 'SELECT * FROM customers WHERE address = ' + mysql.escape(adr); con.query(sql, function (err, result) { if (err) throw err; console.log(result); }); });
C:\Users\My Name>node demo_db_where_escape.js
[
{ id: 4, name: 'Hannah', address: 'Mountain 21'}
]