Line Breaks with ' and "

Question

I am using phonegap for my mobile application . I need to generate queries dynamically and then execute the query;

qry += "('" + item1 + "','" + id + "','" + item2 + "','" + item3 + "'),";

item1,item2,item3 should be strings so that query happens successfully while executing.

the above bit of is fine for my use case in most of the cases . But i got an unexpected error now .

If the value from item1 is as 1'Feet or 10 ' Feet code breaks and execution fails .

How can i overcome this ?

By escaping the string. http://stackoverflow.com/questions/770523/escaping-strings-in-javascript — Biketire, Jun 24 '15 at 11:29

score 1 · Answer 1 · answered Jun 24 '15 at 11:36

Here is an ES2015 solution to show off template tags:

function esc(pieces, ...subs) {
    var result = pieces[0];
    for (var i = 0; i < subs.length; ++i) {
        // uses `.escape`, use other escaping function if you want.
        // for example with `/`
        result += escape(subs[i]) + pieces[i + 1];
    }
    return result;
}

Template tags give us custom logic for templating in the new ES2015 standard and are very useful for this thing.

var hello = "9'c"
console.log(esc`(${hello})`); // (9%27c)

function esc(pieces) {
    var result = pieces[0];
    var subs = [].slice.call(arguments, 1);
    for (var i = 0; i < subs.length; ++i) {
        result += escape(subs[i]) + pieces[i + 1];
    }
    return result;
}
var hello = "9'c";


document.body.innerHTML = esc`(${hello})`;

score 0 · Answer 2 · edited May 23 '17 at 10:26

0

At last found answer , We need escape string in Sql rather than in jquery , replacing double single quotes instead of an single quote solves the problem .

item1.replace(/'/g, "''") ;

Escape Character in SQL Server

edited May 23 '17 at 10:26

Community

1
1

answered Jun 24 '15 at 12:26

user3383301

1,891
3
21
49

you should have mentioned in your question that the query goes to MySQL – Kaii Jun 24 '15 at 12:28
Yea i forgot that one ! – user3383301 Jun 24 '15 at 12:29

David R · Answer 3 · 2015-06-24T12:39:15.940

-2

[Edited the previous answer]

Try this,

<!DOCTYPE html>
<html>
 <head>
  <title></title>
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>
  <script type="text/javascript">
   function fnEscapeQuotes(){
    var item1= "Ford's";
    var item2= "Dodges's";
    var item3= "Benz's";
    var id=100;
    var qry = "('" + item1 + "','" + id + "','" + item2 + "','" + item3 + "'),";
    alert(JSON.stringify(qry).slice(1, -1));
   }
  </script>
 </head>
 <body onload="fnEscapeQuotes();">
  
 </body>
</html>

edited Jun 24 '15 at 12:39

answered Jun 24 '15 at 11:31

David R

14,711
7
54
72

On this querying is done succesfully . But in db i get #39 instead of ' . – user3383301 Jun 24 '15 at 11:36
1

It's building a javascript string. It needs to be javascript-escaped (with `\'`), not HTML escaped. – James Thorpe Jun 24 '15 at 11:37
How can i escape it with \n if the value for the variable is assigned dynamically ? – user3383301 Jun 24 '15 at 11:38

Line Breaks with ' and "

3 Answers3