node js mysql escape string
// Escape values: let escaped = mysql.escape('myString'); // or mysql.query( "SELECT * FROM `table` WHERE `str1`=? AND `str2`=?", ['myString1', 'myString2'], (err, result)=>{} ); // Escape identifiers: mysql.query( "SELECT * FROM ??", // note the double ? ['tablename'], (err, result)=>{} );