using sql scripts in javascript

Question

我可以使用javascript使用sql脚本将项目保存到数据库吗？

Answer 1

Not directly, unless you are working with a client-side database . However, you can hook JavaScript up with a server-side script (whichever backend you'd prefer) using XMLHttpRequest .

Answer 2

You really don't want to do this. If you store SQL in your client-side javascript, you are exposing the details and structure of your database to an attacker. Creating an AJAX method to execute passed in javascript without creating a hole and attacker could use to perform SQL Injection attacks would be quite difficult.

Answer 3

As in Javascript on the browser? No, you can't.

Hypothetically you could use AJAX techniques to push SQL commands through a server layer and thence to the database but you really, really wouldn't want to since that would be an unholy mother of all security risks.

Answer 4

不，您必须使用某种服务器端处理语言，例如php，asp...。