Please note, this is a STATIC archive of website www.w3schools.com from 05 May 2020, cach3.com does not collect or store any user information, there is no "phishing" involved.
demo_db_where_placeholder.js:
var mysql = require('mysql'); var con = mysql.createConnection({ host: "localhost", user: "myusername", password: "mypassword", database: "mydb" }); con.connect(function(err) { if (err) throw err; var adr = 'Mountain 21'; //Escape the address value: var sql = 'SELECT * FROM customers WHERE address = ?'; //Send an array with value(s) to replace the escaped values: con.query(sql, [adr], function (err, result) { if (err) throw err; console.log(result); }); });
C:\Users\My Name>node demo_db_where_placeholder.js
[
{ id: 4, name: 'Hannah', address: 'Mountain 21'}
]