Insert a string to SQLite using JS without syntax errors

Question

I am fetching some contents from Google Feeds API using JavaScript API and trying to insert them into a SQLite database in a Phonegap app.

But I get so many syntax errors due to non escaped and special characters in the fetched content string. Because the content string has HTML codes and their attributes and their values within quotes.

Can anybody help me with a solution to get this task done? Can somebody suggest me ways to perform the PHP functions like addslashes, htmlentities, htmlspecialchars? Let me know a proper way to do this insertion. Only JS.

Eg: The inserting variable "content" is a string with <div id="test" style="color:#000;">I'm tall and I'm "26" now.</div> and it needs to be inserted to a column, the html content without any error.

var content = <div id="test" style="color:#000;">I'm tall and I'm "26" now.</div>
tx.executeSql("INSERT INTO MyTable(id, Content) VALUES ('1',content)");

The variable "content" has single and double quotes and further it can contain many special characters. So the content variable must be formatted before inserting to DB.

CL. · Accepted Answer · 2013-10-08 14:11:12Z

1

To use arbitrary string values in SQL statements, use parameters:

var content = "!'§$%&/()=?+*~#|<...";
...
tx.executeSql("INSERT INTO MyTable(ID, Name, Content) VALUES(?,?,?)",
              [123, "Some Name", content]);

answered Oct 8, 2013 at 14:11

CL.

182k18 gold badges241 silver badges282 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Teshan N. · Accepted Answer · 2013-10-09 04:36:15Z

0

I think I have found the answer to format js string before adding to db in http://phpjs.org/functions/htmlentities/

answered Oct 9, 2013 at 4:36

Teshan N.

2,6155 gold badges35 silver badges63 bronze badges

Comments

shishiroars · Accepted Answer · 2013-10-21 07:58:45Z

0

May be below code help you out.

var db = window.sqlitePlugin.openDatabase("Databases", "1.0", "XYZ", 1000000);  

db.transaction(function(tx) {
   var content = $("#test").html();

   tx.executeSql("INSERT INTO MyTable (id, Content) VALUES(?,?)",['1',content], querySuccess, errorCB);         
}, errorCB);


<body>
   <div id="test" style="color:#000;">I'm tall and I'm "26" now.</div>
</body>

answered Oct 21, 2013 at 7:58

shishiroars

113 bronze badges

Collectives™ on Stack Overflow

Insert a string to SQLite using JS without syntax errors

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related