so i have this req -
app.delete("/delete/:sku", (req, res) => {
const sku = req.params.sku;
db.query(DELETE FROM products WHERE sku IN(?)
the console.log(req.params.sku) results in - wefwefwef,erferferfrgrwb,23r23r on the console,
i need to convert the sku string to a SQL list so i can insert the values for the IN clause.
You should use a parameterized query. This could look something like this.
const sku = req.params.sku.split(',');
const ins = new Array(sku.length).fill('?').join();
db.query(`DELETE FROM products WHERE sku IN (${ins})`, sku);
If you need to give the params names like @p1, then something like this
const sku = req.params.sku.split(',');
const ins = sku.map((_, i) => `@p${i}`).join();
db.query(`DELETE FROM products WHERE sku IN (${ins})`, sku);
Collected from the Internet
Please contact javaer1[email protected] to delete if infringement.
Comments