Using Replacements With A Raw Sequelize Query: Avoiding Single Quotes?
This probably has a really easy answer but I'm not seeing it. I want to do a raw query using Sequelize: var sequelize = require('sequelize'); sequelize .query('LOAD DATA LOCAL I
Solution 1:
If you're sure that datasetName
will never contain any possibility of SQL injections, you can directly insert the table name into the query, like so:
sequelize
.query("LOAD DATA LOCAL INFILE :file
INTO TABLE dataset_" + datasetName + "
FIELDS TERMINATED BY ',' ENCLOSED BY '\"' LINES TERMINATED BY '\n';",
null,
{raw:true}, {file: datasetPath})
The comment posted by mwarren doesn't really really work in this case - Sequelize is seeing that it is a string being inserted, and accordingly escapes it.
Post a Comment for "Using Replacements With A Raw Sequelize Query: Avoiding Single Quotes?"