diff --git a/FAQ.md b/FAQ.md index ce24560..a8ea5cd 100644 --- a/FAQ.md +++ b/FAQ.md @@ -100,7 +100,8 @@ Yeah, you can do this as so: ```js //let's pretend we have a user table with the 'id' as the auto-incrementing primary key -client.query('INSERT INTO users(password_hash, email) VALUES($1, $2) RETURNING id', ['abdddadfcadfaedesdf', 'test@te.st'], function(err, result) { +var queryText = 'INSERT INTO users(password_hash, email) VALUES($1, $2) RETURNING id' +client.query(queryText, ['841l14yah', 'test@te.st'], function(err, result) { if(err) //handle error else { var newlyCreatedUserId = result.rows[0].id; @@ -108,15 +109,6 @@ client.query('INSERT INTO users(password_hash, email) VALUES($1, $2) RETURNING i }); ``` -Or using the evented approach: - -```js -client.query('INSERT INTO users(password_hash, email) VALUES($1, $2) RETURNING id', ['abdddadfcadfaedesdf', 'test@te.st']) - .on('row', function (row) { - var newlyCreatedUserId = row.id; - }); -``` - ### 8. Does node-postgres handle SQL injection? Absolutely! The parameterized query support in node-postgres is first class. All escaping is done by the postgresql server ensuring proper behavior across dialects, encodings, etc... For example, this will not inject sql: