fix: 修复埋点查询 LIMIT/OFFSET 参数类型错误
- mysql2 execute 对 LIMIT/OFFSET 参数类型要求严格 - 改为直接嵌入 SQL 字符串(pSize 和 offset 已是安全的数字)
This commit is contained in:
@@ -157,14 +157,15 @@ router.get('/track/list', requireAdmin, async (req, res) => {
|
||||
)
|
||||
const total = (countResult as any[])[0].total
|
||||
|
||||
// LIMIT/OFFSET 直接嵌入 SQL(mysql2 execute 对这些参数类型要求严格)
|
||||
const [rows] = await pool.execute(
|
||||
`SELECT t.*, u.nickname
|
||||
FROM track_events t
|
||||
LEFT JOIN users u ON t.user_id = u.id
|
||||
WHERE ${where}
|
||||
ORDER BY t.created_at DESC
|
||||
LIMIT ? OFFSET ?`,
|
||||
[...params, pSize, offset]
|
||||
LIMIT ${pSize} OFFSET ${offset}`,
|
||||
params
|
||||
)
|
||||
|
||||
res.json({
|
||||
|
||||
Reference in New Issue
Block a user