No idea to escape single quote' and double quote".

[kmvan]

const sql = sqlstring.format('SELECT * FROM `terms` WHERE `name` = ?', [
    `single'double"`,
  ])
console.log(sql)
// output: SELECT * FROM `terms` WHERE `name` = 'single\'double\"'
// near "double": syntax error

Looks like single\'double\" shoud be single''double""
Need I create a user function to replace the quote?

[dougwilson]

Hi @kmvan sorry you are having trouble. These methods of escaping values only works when the NO_BACKSLASH_ESCAPES SQL mode is disabled (which is the default state for MySQL servers).