节点MySQL转义LIKE语句

Question

如何在node-mysql中转义MySQL LIKE语句？

有点像

"SELECT * FROM card WHERE name LIKE '%" + connection.escape(req.body.search) + "%'"

结果是

'SELECT * FROM card WHERE name LIKE \'%\'hello\'%\''

这是语法错误.如果我使用替代语法

connection.query("SELECT * FROM card WHERE name LIKE '%?%'", req.body.search, function () {});

导致类似的语法错误.我也试过了

connection.query("SELECT * FROM card WHERE name LIKE ?", '%' + req.body.search + '%', function () {});

这最终会逃脱'%'的标志.

Answer 1

不知道为什么它%在你的上一个例子中逃脱了,因为这对我来说很好:

// lifted from my code:
var value = 'ee20e966289cd7';
connection.query('SELECT * from django_session where session_key like ?', '%' + value + '%', ...)

// Result:
[ { session_key: '713ee20e966289cd71b936084a1e613e', ... } ]

当我打开驱动程序中的调试(debug:true作为参数传递mysql.createConnection)时,它不会转义百分号:

{ command: 3,
  sql: 'SELECT * from django_session where session_key like \'%ee20e966289cd7%\'' }

(它确实逃脱了单引号,但这仅用于显示目的)

(使用mysql@2.0.0-alpha8)

Answer 2

我已经取得了类似的成功

"SELECT * FROM card WHERE name LIKE " + connection.escape('%'+req.body.search+'%')

Answer 3

怎么样

mysql.format("SELECT * FROM card WHERE name LIKE CONCAT('%', ?,  '%')", req.body.search)

?