UNPKG

code-auto

Version:
107 lines (92 loc) 3.21 kB
// https://github.com/sequelize/sequelize/blob/master/lib/sql-string.js 'use strict'; /* jshint -W110 */ var dataTypes = require('sequelize').DataTypes; var _ = require('sequelize').Utils._; function escape(val, timeZone, dialect, format) { var prependN = false; if (val === undefined || val === null) { return 'NULL'; } switch (typeof val) { case 'boolean': // SQLite doesn't have true/false support. MySQL aliases true/false to 1/0 // for us. Postgres actually has a boolean type with true/false literals, // but sequelize doesn't use it yet. if (dialect === 'sqlite' || dialect === 'mssql') { return +!!val; } return '' + !!val; case 'number': return val + ''; case 'string': // In mssql, prepend N to all quoted vals which are originally a string (for // unicode compatibility) prependN = dialect === 'mssql'; break; } if (val instanceof Date) { val = dataTypes[dialect].DATE.prototype.stringify(val, { timezone: timeZone }); } if (Buffer.isBuffer(val)) { if (dataTypes[dialect].BLOB) { return dataTypes[dialect].BLOB.prototype.stringify(val); } return dataTypes.BLOB.prototype.stringify(val); } if (Array.isArray(val)) { var partialEscape = _.partial(escape, _, timeZone, dialect, format); if (dialect === 'postgres' && !format) { return dataTypes.ARRAY.prototype.stringify(val, {escape: escape}); } return val.map(partialEscape); } if (!val.replace) { throw new Error('Invalid value ' + val); } if (dialect === 'postgres' || dialect === 'sqlite' || dialect === 'mssql') { // http://www.postgresql.org/docs/8.2/static/sql-syntax-lexical.html#SQL-SYNTAX-STRINGS // http://stackoverflow.com/q/603572/130598 val = val.replace(/'/g, "''"); } else { val = val.replace(/[\0\n\r\b\t\\\'\"\x1a]/g, function(s) { switch (s) { case '\0': return '\\0'; case '\n': return '\\n'; case '\r': return '\\r'; case '\b': return '\\b'; case '\t': return '\\t'; case '\x1a': return '\\Z'; default: return '\\' + s; } }); } return (prependN ? "N'" : "'") + val + "'"; } exports.escape = escape; function format(sql, values, timeZone, dialect) { values = [].concat(values); if (typeof sql !== 'string') { throw new Error('Invalid SQL string provided: ' + sql); } return sql.replace(/\?/g, function(match) { if (!values.length) { return match; } return escape(values.shift(), timeZone, dialect, true); }); } exports.format = format; function formatNamedParameters(sql, values, timeZone, dialect) { return sql.replace(/\:+(?!\d)(\w+)/g, function(value, key) { if ('postgres' === dialect && '::' === value.slice(0, 2)) { return value; } if (values[key] !== undefined) { return escape(values[key], timeZone, dialect, true); } else { throw new Error('Named parameter "' + value + '" has no value in the given object.'); } }); } exports.formatNamedParameters = formatNamedParameters;