How to use Parameterized query using TypeORM for postgres database and nodejs as the application's back-end server

Question

I want to fetch the rows from a postgres table where name = SUPREME INT'L, Note: this string has a single quote in between the name characters. I am using TypeORM as an ORM, POSTGRESQL as the database.

My query:

 import { getConnection } from 'typeorm';
 const connection =  getConnection();

 var query = `SELECT * from skusimulations where "name"= ? `;
 const output =await connection.query(query, ['SUPREME INT'L'])

I am getting error while executing this, I want to escape the single quote by using stored proc.

Any help would be highly appreciated.

What error? Are you referring to your failure to escape the single quote in your literal, because the query itself looks like it is already using parameter escaping. — Richard Huxton
– Richard Huxton, Commented Feb 14, 2019 at 7:57
@RichardHuxton, yes indeed I used stored proc to escape the single quote. Btw I solved it by storing the "name" in a variable and passing the variable in the replacement array, another modification was instead of '?' changed it to $1. — Rohan Kumar
– Rohan Kumar, Commented Feb 14, 2019 at 8:22

Dale K · Accepted Answer · 2024-05-13 22:28:36Z

11

I changed a few things by referring to the typeorm.io docs.

Final changes:

  var name = "SUPREME INT'L" ;
  var query = `SELECT * from skusimulations where "skuId"= $1 `;
  var skuData =await connection.query(query, [name])

edited May 13, 2024 at 22:28

Dale K

28.1k15 gold badges59 silver badges85 bronze badges

answered Feb 14, 2019 at 8:26

Rohan Kumar

1911 gold badge3 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

eljapi Over a year ago

this was really helpful, thanks! , if someone need this for mssql (like me) you just need to change the $ for @ and the position parameter start with 0

kj3 · Accepted Answer · 2022-07-11 16:12:34Z

1

for mysql await getEntityManager().query('SELECT * FROM tbl_1 WHERE name = ?', [ p_name ])

for mssql await getEntityManager().query('SELECT * FROM tbl_1 WHERE name = @0', [ p_name ])

for postgres .query('SELECT * FROM test WHERE id = ANY($1)', [[1,2,4]]

below worked for me in case of mssql driver

for more info https://github.com/typeorm/typeorm/issues/556

answered Jul 11, 2022 at 16:12

kj3

1231 silver badge4 bronze badges

Collectives™ on Stack Overflow

How to use Parameterized query using TypeORM for postgres database and nodejs as the application's back-end server

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related