The following code example shows how to bind parameters to create parameterized statements.

Single-Use Statements

The query method accepts an additional array parameter for binding query parameters to values.

db.open("...", (err) => {
     db.query(
        "SELECT Worker_Reference_WID, Legal_Name_Last_Name FROM [CData].[Human_Resources].Workers WHERE Legal_Name_Last_Name = ?",
        ["Morgan"],
        (err, rows, moreRows) => {
        for (var i = 0; i < rows.length; i++) {
            console.log("Worker_Reference_WID = " + rows["Worker_Reference_WID"]);
            console.log("Legal_Name_Last_Name = " + rows["Legal_Name_Last_Name"]);
        }

        if (!moreRows) {
            console.log("All rows have been processed");
        }
    });
});

Reusable Statements

The prepare method creates prepared ODBCStatement objects, which can be re-used across multiple execute and executeNonQuery calls.

When you execute an ODBCStatement, your callback receives an ODBCResult object which is used to fetch results. It can be used to fetch all results at once into an array, or it can fetch rows one at a time.

db.open("...", (err) => {
    db.prepare(
        "SELECT Worker_Reference_WID, Legal_Name_Last_Name FROM [CData].[Human_Resources].Workers WHERE Legal_Name_Last_Name = ?",
        (err, stmt) => {
        function printData(result, done) {
            result.fetch((err, row) => {
                if (row === null) done();

                console.log("Worker_Reference_WID = " + row["Worker_Reference_WID"]);
                console.log("Legal_Name_Last_Name = " + row["Legal_Name_Last_Name"]);
                printData(result);
            }
        }

        stmt.executeQuery("Morgan 1", (err, result) => {
            printData(result, () => {
                stmt.executeQuery("Morgan 2", (err, result) => {
                    printData(result);
                });
            });
        });
    });
});