postgresql 错误：where 子句中不存在列“”

Question

我正在尝试检查电子邮件是否已经存在，并且我正在电子邮件参数中发送 daniyal@gmail.com，但收到错误列“daniyal”不存在。

ctx.app.pool.query("SELECT * FROM users WHERE email = " + ctx.request.body.email, (err, result) => {
            if (err) {
                ctx.body = {
                    status: 500,
                    message: 'Something went wrong'
                };
                console.log('Query Error: ', err);
                throw err
            } else {
                ctx.body = {
                    exceptions: "",
                    status: 200,
                    error: false,
                    message: "user already exists with this email",
                };
            }
        });

Answer 1

您的直接问题是您在传递的值周围缺少单引号（因此，Postgres 将其视为列名）。

但是为此，您确实想要使用参数化查询，既安全又高效

ctx.app.pool.query(
    "SELECT * FROM users WHERE email = ?", 
    [ctx.request.body.email], 
    function(err, result) => {
        if (err) {
            ctx.body = {
                status: 500,
                message: 'Something went wrong'
            };
            console.log('Query Error: ', err);
            throw err
        } else {
            ctx.body = {
                exceptions: "",
                status: 200,
                error: false,
                message: "user already exists with this email",
            };
        }
    }
);