node.js、MySQL、JSON、DB连接和CRUD

使用node.js，我尝试从JSON数据读取和写入MySQL数据库

我可以通过以下方式从数据库获取数据：

app.get('/fetchdata',function(req,res) {
    var data = {
        "Data":""
    };

    connection.query("SELECT * from stuff",function(err, rows, fields){
        if(rows.length != 0){
            data["Data"] = rows;
            res.json(data);
        }else{
            data["Data"] = 'No data Found..';
            res.json(data);
        }
    });
});

我正试图通过以下方式向db写入：

app.post('/fetchdata',function(req,res) {
    var ssn = req.body.Ssn;
    var name = req.body.Name;
    var password = req.body.Password;
    var category = req.body.Category;
    var address = req.body.Address;
    var phone = req.body.Phone;
    var bankaccount = req.body.Bankaccount;
    connection.query("INSERT INTO stuff (Ssn, Name, Password, Category, Address, Phone, Bankaccount) VALUES("+ ssn +", "+ name +", "+ password +", "+ category +","+ address +","+ phone +", "+ bankaccount +")"), function(req) {
        req.json(data);
    }
});

---

你有一个SQL注入漏洞。你能详细说明什么不起作用吗？你有什么错误吗？