先核來源與已訂規則
本例對應欄名可為 order 或 we"ird。SQL 識別名稱要雙引號,內嵌引號加倍;O'Neil 是資料值,要參數綁定,不能把欄名引號法當作綁值。空欄名在此不容許。
| 紀錄 | 輸入 JSON |
|---|---|
| 原例輸入 | {"column":"order","value":"O'Neil"} |
比較兩條實際路徑
未加引號的 order 建表失敗;更正可照存 O'Neil,內嵌引號欄名也可用。例子只執行所附本地欄名和值。
| 路徑 | 輸出 JSON |
|---|---|
| 錯誤路徑 | {"error":{"code":1},"values":[]} |
| 更正路徑 | {"error":null,"values":[{"value":"O'Neil"}]} |
import {DatabaseSync} from 'node:sqlite';
import {TextDecoder} from 'node:util';
import {inflateSync} from 'node:zlib';
import {posix} from 'node:path';
import {createHash} from 'node:crypto';
const rows=(db,sql)=>db.prepare(sql).all().map(r=>({...r}));
const failed=(action)=>{try{action();return null;}catch(e){return {code:e.errcode??e.code??e.name};}};
import assert from 'node:assert/strict';
const run=function run(i,corrected=true){
if(!['order','we"ird',''].includes(i.column))return {error:'outside-fixed-example',values:[]};
if(!i.column)return {error:'empty-identifier',values:[]};
const db=new DatabaseSync(':memory:');const name=corrected?'"'+i.column.replace(/"/g,'""')+'"':i.column;
try{const error=failed(()=>{db.exec('CREATE TABLE target('+name+' TEXT);');db.prepare('INSERT INTO target('+name+') VALUES(?)').run(i.value);});
return {error,values:error?[]:rows(db,'SELECT '+name+' AS value FROM target')};
}finally{db.close();}
};
const cases=[{"label":"misleading base","input":{"column":"order","value":"O'Neil"},"expected":{"error":{"code":1},"values":[]},"corrected":false},{"label":"corrected base","input":{"column":"order","value":"O'Neil"},"expected":{"error":null,"values":[{"value":"O'Neil"}]},"corrected":true},{"label":"embedded quote in identifier","input":{"column":"we\"ird","value":"A"},"expected":{"error":null,"values":[{"value":"A"}]},"corrected":true},{"label":"empty identifier prohibited","input":{"column":"","value":"A"},"expected":{"error":"empty-identifier","values":[]},"corrected":true}];
for(const test of cases){
const actual=run(test.input,test.corrected);
assert.deepEqual(actual,test.expected,test.label);
console.log(test.label,actual);
}
下次載入前核邊界
欄名內嵌引號正確轉義便可用;明確空名稱門檻則不建欄。
| 情況 | 輸入 JSON | 預期輸出 JSON |
|---|---|---|
| 欄名內嵌引號 | {"column":"we\"ird","value":"A"} | {"error":null,"values":[{"value":"A"}]} |
| 空識別名稱拒收 | {"column":"","value":"A"} | {"error":"empty-identifier","values":[]} |
參數位置可否直接代替目標欄名?
查看參考答案
不可,參數綁資料值,識別名稱依獲准引號規則組建。此處 order 加引號,O'Neil 用綁值。