Socket.io, Node.js: How can a javascript variable be passed to mysql query from in a javascript.js?

Question

There is an error when a variable of value '222.222.222.222', is attempted to be passed into the mysql query, but not when a variable having a value of '2' is passed into the same mysql query.

Any help would be greatly appreciated.

This gives error:

var javascriptVariable = '222.222.222.222';

$query = 'INSERT INTO misc_table (misc_field) VALUES ('+javascriptVariable+')';

connection.query($query, function(err, rows, fields) {
if(err){
    console.log("An error ocurred performing the query.");
    return;
    }
    console.log("Query succesfully executed: ", rows);
    });

This does not give error:

var javascriptVariable = '2';

$query = 'INSERT INTO misc_table (misc_field) VALUES ('+javascriptVariable+')';

connection.query($query, function(err, rows, fields) {
if(err){
    console.log("An error ocurred performing the query.");
    return;
    }
    console.log("Query succesfully executed: ", rows);
    });

$query = 'INSERT INTO misc_table (misc_field) VALUES ('+javascriptVariable+')'; :) — halilcakar
– halilcakar, Commented Jun 7, 2020 at 15:12
This is kinda really basic just try to go over js basics again i'm guessing you need some problems there .😊 — halilcakar
– halilcakar, Commented Jun 7, 2020 at 15:13
Edited the question, but still not working. There is an error: An error ocurred performing the query. — 65535
– 65535, Commented Jun 8, 2020 at 1:27
Oh aight i saw you get your answer and it's better to use it that way bdw. Thx @Vasyl Moskalov — halilcakar
– halilcakar, Commented Jun 9, 2020 at 8:04

Vasyl Moskalov · Accepted Answer · 2020-06-08 01:55:43Z

2

Never ever thought to update databases in this manner. First. In fact, you try to execute next code

INSERT INTO misc_table (misc_field) VALUES (222.222.222.222)

Second. This is the straight way to sql injection

Thrid. Try something like this

var javascriptVariable = '222.222.222.222';

let $query = 'INSERT INTO misc_table (misc_field) VALUES (?)';
connection.query(
    $query,[ javascriptVariable ], 
    function (...args) {
....
    }
);

answered Jun 8, 2020 at 1:55

Vasyl Moskalov

4,6403 gold badges24 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Socket.io, Node.js: How can a javascript variable be passed to mysql query from in a javascript.js?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related