# SQL Issue inserting a record in a database

**URL:** https://discourse.nodered.org/t/sql-issue-inserting-a-record-in-a-database/95114
**Category:** General
**Created:** [4 February 2025 16:01 UTC](https://discourse.nodered.org/t/sql-issue-inserting-a-record-in-a-database/95114 "2025-02-04T16:01:34Z")
**Posts on this page:** 1
**Showing post:** 7

<div class="post-metadata">

### Author: ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)
#### Post date: [5 February 2025 07:31 UTC](https://discourse.nodered.org/t/sql-issue-inserting-a-record-in-a-database/95114/7 "2025-02-05T07:31:57Z")

</div>

Your SQL statement is a "prepared query" which is good form, it protects the database from SQL injection (I've learned that by rote, no idea how it actually works).  
I personally avoid the ?, ?, ?, ... syntax, preferring a prepared query with msg.payload as explicit key: value pairs.

So I would have written your function like this

```auto
const dataArray = msg.payload.split(";");
msg.payload = {
"itype": dataArray[1], 
"ihum": dataArray[2];
"itemp": dataArray[3],
"ihic": dataArray[4],
"irsrp": dataArray[5]
}

msg.topic = "insert into DHT (Type,Hum,Temp,Hic,rsrp) values (:itype, :ihum, :itemp, :ihic, :irsrp)"
return msg

```

Have fun with Node-red! 😀

---

_[View the full topic](https://discourse.nodered.org/t/sql-issue-inserting-a-record-in-a-database/95114)._