mysql - putting vars in sql query

Question

New to Node development.

How do you put a variable in a sql query for the VALUES part. Here is what I have. Let me know if it will work.

  let email = req.body.email;
  let number = req.body.number;

  var sql = "INSERT INTO userdata (email, number) VALUES (email, number)";

Thanks

Also, second question. is there anyway I can check if a record already exists with the same email or number within the one sql statement.

question from:https://stackoverflow.com/questions/65865948/putting-vars-in-sql-query

Answer 1

According documentation, You should to use parametrized query like:

const email = req.body.email;
const number = req.body.number;

const sql = "INSERT INTO userdata (email, number) VALUES (?, ?)";

connection.query(sql, [ email, number ], 

    function (err, results) {

    }
);

About second question: If you want to your table will have unique records fro each email/number pair you should to add unique index based on those fields.