Question

I have been stuck on this for a while now and I cannot seem to insert two variables into a table. I would think this code should work…

var db = openDatabase('mydb', '1.0', 'Test DB', 2 * 1024 * 1024);

function submit() 
{
    var input = document.getElementById("save_name").value;
    var msg;
    var time_stamp = new Date();

    db.transaction(function (tx) 
    {
        tx.executeSql('CREATE TABLE IF NOT EXISTS LOGS (id auto_increment, date_time varchar(128), log varchar(64))');
        tx.executeSql('INSERT INTO LOGS (log, date_time) VALUES (?, ?)', [input, time_stamp]); // <--Problem here!
        msg = '<p>Log message created and row inserted.</p>';
        document.querySelector('#status').innerHTML = msg;
    });
}

But it is not inserting my variables to my table.

Here is my printing function:

function display_fields() 
{
    db.transaction(function (tx) 
    {
        tx.executeSql('SELECT * FROM LOGS', [], function (tx, results) {
            var len = results.rows.length, i;
            msg = "<p>Found rows: " + len + "</p>";
            document.querySelector('#status').innerHTML += msg;
            for (i = 0; i < len; i++) 
            {
                msg = "<p><b>" + results.rows.item(i).log + " " + result.rows.item(i).date_time + "</b></p>";
                document.querySelector('#status').innerHTML += msg;
            }
        }, null);
    });
}

Any help would be appreciated.

Answer 1

The only way I could get this to work was by cancatinating

Here is what I did:

tx.executeSql('INSERT INTO LOGS (log, date_time) VALUES ("' + input + '", "' + time_stamp + '")');

I know this opens up to SQL injections but I couldn’t get it to work any other way.