使用 Node 和 mysql。 在字符串变量处插入失败

Question

I am trying to insert a string variable into my database and the boolean and int go in just fine, but it always tells me

error: column "spike" does not exist

(spike is what is in the string variable)

let sql2 = "INSERT INTO words (gameNumber, wordsOrdered, guessed, unkey) VALUES (2, "+wordsV[1]+", "+guessed[1]+", "+key[1]+" )"
pool.query(sql2, function(err, result){

The wordsV is an array of strings the guessed is a bool and goes in, and the key is an int and goes in.

Answer 1

you need escape values

let sql2 = "INSERT INTO words (gameNumber, wordsOrdered, guessed, unkey) VALUES (2, '"+wordsV[1]+"', '"+guessed[1]+"', '"+key[1]+"' )"
pool.query(sql2, function(err, result){

but the best way is to escape the values correctly: https://github.com/mysqljs/mysql#escaping-query-values

Answer 2

尝试像这样转义您的 sql 值（ https://www.databasestar.com/sql-escape-single-quote/ ）：

let sql2 = "INSERT INTO words (gameNumber, wordsOrdered, guessed, unkey) VALUES (2, '"+wordsV[1]+"', '"+guessed[1]+"', '"+key[1]+"' )"