Select with variable Nodejs Mysql

Question

I have this request:

var cartes = "SELECT type_carte, classe, date_validite, gare_depart, gare_arrivee, id_client WHERE id_client='" +clcour+ "'";
connection.query(cartes, function(error, lescartes) {
    if (error) {
        console.log(error.message);
    } else {
        console.log('Cartes chargés');
        cartescl = lescartes;
    }
});

but I got a MYSQL SYNTAX ERROR: use near 'WHERE id_client='5' ' at line 1

Any help on why I'm getting this error?

MyGGaN · Accepted Answer · 2015-06-18 14:08:08Z

1

You have missed the FROM table in the query.

SELECT type_carte, classe, date_validite, gare_depart, gare_arrivee, id_client
FROM your_table
WHERE id_client = ?;

Also consider using prepared statements to mitigate injections. Another issue you might have. WHERE id_client = '5'. I advice you to have IDs as numeric values UNSIGNED INT might be a good start. In that case you should WHERE id_client = 5 (no '). But best is to use prepared statements. Then you don't have to worry at all.

answered Jun 18, 2015 at 14:08

MyGGaN

1,8263 gold badges32 silver badges43 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Select with variable Nodejs Mysql

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related