123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
/** * SqlString * Simple SQL escape and format for MySQL * @link https://github.com/mysqljs/sqlstring */const ID_GLOBAL_REGEXP = /`/g;const QUAL_GLOBAL_REGEXP = /\./g;const CHARS_GLOBAL_REGEXP = /[\0\b\t\n\r\x1a\"\'\\]/g;const CHARS_ESCAPE_MAP = {  "\0": "\\0",  "\b": "\\b",  "\t": "\\t",  "\n": "\\n",  "\r": "\\r",  "\x1a": "\\Z",  '"': '\\"',  "'": "\\'",  "\\": "\\\\",} as Record<string, string>;
export default class SqlString {  static escapeId(val: any, forbidQualified?: boolean): string {    if (Array.isArray(val)) {      let sql = "";
      for (let i = 0; i < val.length; i++) {        sql += (i === 0 ? "" : ", ") + this.escapeId(val[i], forbidQualified);      }
      return sql;    } else if (forbidQualified) {      return "`" + String(val).replace(ID_GLOBAL_REGEXP, "``") + "`";    } else {      return (        "`" +        String(val)          .replace(ID_GLOBAL_REGEXP, "``")          .replace(QUAL_GLOBAL_REGEXP, "`.`") +        "`"      );    }  }
  static escape(val: any, stringifyObjects?: boolean, timeZone?: string) {    if (val === undefined || val === null) {      return "NULL";    }
    switch (typeof val) {      case "boolean":        return val ? "true" : "false";      case "number":        return val + "";      case "object":        if (val instanceof Date) {          return this.dateToString(val, timeZone || "local");        } else if (Array.isArray(val)) {          return this.arrayToList(val, timeZone);        } else if (typeof val.toSqlString === "function") {          return String(val.toSqlString());        } else if (stringifyObjects) {          return escapeString(val.toString());        } else {          return this.objectToValues(val, timeZone);        }      default:        return escapeString(val);    }  }
  static arrayToList(array: any[], timeZone?: string) {    let sql = "";
    for (let i = 0; i < array.length; i++) {      const val = array[i];
      if (Array.isArray(val)) {        sql += `${(sql.length === 0 ? "" : ", ")}(${          this.arrayToList(val, timeZone)        })`;      } else {        sql += (i === 0 ? "" : ", ") + this.escape(val, true, timeZone);      }    }
    return sql;  }
  static format(    sql: string,    vals?: object | any[],    stringifyObjects?: boolean,    timeZone?: string,  ) {    if (vals == null) {      return sql;    }
    const values = Array.isArray(vals) ? vals : [vals];
    let chunkIndex = 0;    const placeholdersRegex = /\?+/g;    let result = "";    let valuesIndex = 0;    let match;
    while (      valuesIndex < values.length &&      (match = placeholdersRegex.exec(sql))    ) {      const len = match[0].length;
      if (len > 2) {        continue;      }
      const value = len === 2        ? this.escapeId(values[valuesIndex])        : this.escape(values[valuesIndex], stringifyObjects, timeZone);
      result += sql.slice(chunkIndex, match.index) + value;      chunkIndex = placeholdersRegex.lastIndex;      valuesIndex++;    }
    if (chunkIndex === 0) {      // Nothing was replaced      return sql;    }
    if (chunkIndex < sql.length) {      return result + sql.slice(chunkIndex);    }
    return result;  }
  static dateToString(date: string | number | Date, timeZone: string) {    const dt = new Date(date);
    if (isNaN(dt.getTime())) {      return "NULL";    }
    let year;    let month;    let day;    let hour;    let minute;    let second;    let millisecond;
    if (timeZone === "local") {      year = dt.getFullYear();      month = dt.getMonth() + 1;      day = dt.getDate();      hour = dt.getHours();      minute = dt.getMinutes();      second = dt.getSeconds();      millisecond = dt.getMilliseconds();    } else {      const tz = convertTimezone(timeZone);
      if (tz !== false && tz !== 0) {        dt.setTime(dt.getTime() + tz * 60000);      }
      year = dt.getUTCFullYear();      month = dt.getUTCMonth() + 1;      day = dt.getUTCDate();      hour = dt.getUTCHours();      minute = dt.getUTCMinutes();      second = dt.getUTCSeconds();      millisecond = dt.getUTCMilliseconds();    }
    // YYYY-MM-DD HH:mm:ss.mmm    const str = zeroPad(year, 4) +      "-" +      zeroPad(month, 2) +      "-" +      zeroPad(day, 2) +      " " +      zeroPad(hour, 2) +      ":" +      zeroPad(minute, 2) +      ":" +      zeroPad(second, 2) +      "." +      zeroPad(millisecond, 3);
    return escapeString(str);  }
  static objectToValues(object: Record<string, any>, timeZone?: string) {    let sql = "";
    for (const key in object) {      const val = object[key];
      if (typeof val === "function") {        continue;      }
      sql += `${(sql.length === 0 ? "" : ", ")}${this.escapeId(key)} = ${        this.escape(val, true, timeZone)      }`;    }
    return sql;  }
  static raw(sql: string) {    if (typeof sql !== "string") {      throw new TypeError("argument sql must be a string");    }
    return {      toSqlString: function toSqlString() {        return sql;      },    };  }}
function escapeString(val: string) {  let chunkIndex = (CHARS_GLOBAL_REGEXP.lastIndex = 0);  let escapedVal = "";  let match;
  while ((match = CHARS_GLOBAL_REGEXP.exec(val))) {    escapedVal += val.slice(chunkIndex, match.index) +      CHARS_ESCAPE_MAP[match[0]];    chunkIndex = CHARS_GLOBAL_REGEXP.lastIndex;  }
  if (chunkIndex === 0) {    // Nothing was escaped    return `'${val}'`;  }
  if (chunkIndex < val.length) {    return `'${escapedVal}${val.slice(chunkIndex)}'`;  }
  return `'${escapedVal}'`;}
function zeroPad(num: number, length: number) {  let number = num.toString();  while (number.length < length) {    number = "0" + number;  }
  return number;}
function convertTimezone(tz: string) {  if (tz === "Z") {    return 0;  }
  const m = tz.match(/([\+\-\s])(\d\d):?(\d\d)?/);  if (m) {    return (      (m[1] === "-" ? -1 : 1) *      (parseInt(m[2], 10) + (m[3] ? parseInt(m[3], 10) : 0) / 60) *      60    );  }  return false;}