如何正确逃脱？

Question

我有使用模板字符串语法编写的 sql 字符串：

const sql = `select * from tbl_name where smth=$1 name like '%$2%'`;

const data = await execute(sql, [something, someName]);

我在绑定第二个参数时遇到问题 - $2 因为单引号。应该怎么写？

错误：Error: Query failed: bind message supplies 2 parameters, but prepared statement "" requires 1

Answer 1

我认为你应该这样使用通配符：

const sql = `select * from tbl_name where smth=$1 name like $2`;
const data = await execute(sql, [something, `%${someName}%`]);