felixge/node-mysql — Issue #172: Escaping doesn't work for .query "CREATE DATABASE ?",[dbName]
Author: devrim
Created: 2012-03-01 03:55:22+00:00
State: open

mysql does not allow quotes around database name inside this sql `"CREATE DATABASE 'foo'"`, it throws an error.

if you do, `client.query "CREATE DATABASE ?",[dbName]` it fails, doing it `client.query "CREATE DATABASE "+dbName` is not safe. or am i missing something here?

here is a screenshot: http://d.pr/zShS