3/19/25, 1:04 AM Node.
js MySQL Where
Tutorials Exercises Services Sign Up Log in
HTML
CSS JAVASCRIPT SQL PYTHON JAVA PHP HOW TO [Link] C
[Link] MySQL Where
❮ Previous Next ❯
Select With a Filter
When selecting records from a table, you can filter the selection by using the
"WHERE" statement:
Example Get your own [Link] Server
Select record(s) with the address "Park Lane 38":
var mysql = require('mysql');
var con = [Link]({
host: "localhost",
user: "yourusername",
password: "yourpassword",
database: "mydb"
});
[Link](function(err) {
if (err) throw err;
[Link]("SELECT * FROM customers WHERE address = 'Park Lane 38'",
function (err, result) {
if (err) throw err;
[Link](result);
});
});
[Link] 1/9
3/19/25, 1:04 AM [Link] MySQL Where
Run example »
Tutorials Exercises Services Sign Up Log in
HTML
CSS JAVASCRIPT SQL PYTHON JAVA PHP HOW TO [Link] C
Save the code above in a file called "demo_db_where.js" and run the file:
Run "demo_db_where.js"
C:\Users\Your Name>node demo_db_where.js
Which will give you this result:
[
{ id: 11, name: 'Ben', address: 'Park Lane 38'}
]
ADVERTISEMENT
Wildcard Characters
You can also select the records that starts, includes, or ends with a given letter or
phrase.
Use the '%' wildcard to represent zero, one or multiple characters:
Example
Select records where the address starts with the letter 'S':
var mysql = require('mysql');
var con = [Link]({
[Link] 2/9
3/19/25, 1:04 AM [Link] MySQL Where
host: "localhost",
Tutorials
user: Exercises
"yourusername", Services Sign Up Log in
password: "yourpassword",
HTML
CSS JAVASCRIPT
database: "mydb" SQL PYTHON JAVA PHP HOW TO [Link] C
});
[Link](function(err) {
if (err) throw err;
[Link]("SELECT * FROM customers WHERE address LIKE 'S%'", function
(err, result) {
if (err) throw err;
[Link](result);
});
});
Run example »
Save the code above in a file called "demo_db_where_s.js" and run the file:
Run "demo_db_where_s.js"
C:\Users\Your Name>node demo_db_where_s.js
Which will give you this result:
[
{ id: 8, name: 'Richard', address: 'Sky st 331'},
{ id: 14, name: 'Viola', address: 'Sideway 1633'}
]
Escaping Query Values
When query values are variables provided by the user, you should escape the values.
This is to prevent SQL injections, which is a common web hacking technique to
destroy or misuse your database.
[Link] 3/9
3/19/25, 1:04 AM [Link] MySQL Where
The MySQL module has methods to escape query values:
Tutorials Exercises Services Sign Up Log in
HTML
CSS JAVASCRIPT SQL PYTHON JAVA PHP HOW TO [Link] C
Example
Escape query values by using the [Link]() method:
var adr = 'Mountain 21';
var sql = 'SELECT * FROM customers WHERE address = ' + [Link](adr);
[Link](sql, function (err, result) {
if (err) throw err;
[Link](result);
});
Run example »
You can also use a ? as a placeholder for the values you want to escape.
In this case, the variable is sent as the second parameter in the query() method:
Example
Escape query values by using the placeholder ? method:
var adr = 'Mountain 21';
var sql = 'SELECT * FROM customers WHERE address = ?';
[Link](sql, [adr], function (err, result) {
if (err) throw err;
[Link](result);
});
Run example »
If you have multiple placeholders, the array contains multiple values, in that order:
Example
Multiple placeholders:
[Link] 4/9
