Fixing Syntax For using SQL insert in go

Asked Mar 28 '18 at 20:00

Active Mar 28 '18 at 20:00

Viewed 42 times

I am getting an error when I try to use ? arguments when using the go sql library.

Whe I do something like:

_, err = db.Query(
    `INSERT INTO user_account (username, password_hash) VALUES ("username", 'passwordhash');`,

everything works fine.

But when I do the following:

_, err = db.Query(
    `INSERT INTO user_account (username, password_hash) VALUES (?, 'passwordhash');`,
    `'username'`)

I get the error:

pq: syntax error at or near ","

How can I fix this error? I suspect it has something to do with the single quotes around the variables.

If it matters, I'm using postgreq with the pq driver.

asked Mar 28 '18 at 20:00

Joseph Petroske

have you tried `username` instead of `'username'`? The `qp` package will escape the value by itself. – TehSphinX Mar 28 '18 at 20:02
What is happening if you use double quotes for username like: , err = db.Query( `INSERT INTO user_account (username, password_hash) VALUES (?, 'passwordhash');`, `"username"`) – Eray Balkanli Mar 28 '18 at 20:03
On the website I see in the examples no `?` but `$1`, `$2`, etc. Maybe try that. – TehSphinX Mar 28 '18 at 20:05
Thanks for the help. I fixed this by using the $1 syntax (thanks TehSphinx). – Joseph Petroske Mar 28 '18 at 20:09
Once this was fixed, I had a double quote issue as well. The string "'username'" was being added isntead of the string "username". – Joseph Petroske Mar 28 '18 at 20:10
Sorry, I should close this but I don't have enough rep to post an answer. – Joseph Petroske Mar 28 '18 at 20:12

0 Answers0