{"action":"created","issue":{"url":"https://api.github.com/repos/mfrasca/ghini/issues/19","labels_url":"https://api.github.com/repos/mfrasca/ghini/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/mfrasca/ghini/issues/19/comments","events_url":"https://api.github.com/repos/mfrasca/ghini/issues/19/events","html_url":"https://github.com/mfrasca/ghini/issues/19","id":126195441,"number":19,"title":"db hint","user":{"login":"vitaly-t","id":5108906,"avatar_url":"https://avatars.githubusercontent.com/u/5108906?v=3","gravatar_id":"","url":"https://api.github.com/users/vitaly-t","html_url":"https://github.com/vitaly-t","followers_url":"https://api.github.com/users/vitaly-t/followers","following_url":"https://api.github.com/users/vitaly-t/following{/other_user}","gists_url":"https://api.github.com/users/vitaly-t/gists{/gist_id}","starred_url":"https://api.github.com/users/vitaly-t/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vitaly-t/subscriptions","organizations_url":"https://api.github.com/users/vitaly-t/orgs","repos_url":"https://api.github.com/users/vitaly-t/repos","events_url":"https://api.github.com/users/vitaly-t/events{/privacy}","received_events_url":"https://api.github.com/users/vitaly-t/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mfrasca/ghini/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-01-12T14:47:42Z","updated_at":"2016-01-12T15:05:44Z","closed_at":null,"body":"on your code like this:\r\n```js\r\ndb.query(\"UPDATE plant SET position_lat={0}, position_lon={1}, zoom={4} WHERE code='{3}' AND accession_id=(SELECT id FROM accession WHERE code='{2}')\".formatU([data.lat, data.lng, data.accession, data.plant_short, data.zoom]))\r\n```\r\nYou should not format queries like that. There are too many cases where such formatting will become broken. For example, if any of the text strings has quote `'` in it. Only pg-propmise knows how to correctly inject all JavaScript types into a query,and that's the query formatting you should be using."},"comment":{"url":"https://api.github.com/repos/mfrasca/ghini/issues/comments/170940984","html_url":"https://github.com/mfrasca/ghini/issues/19#issuecomment-170940984","issue_url":"https://api.github.com/repos/mfrasca/ghini/issues/19","id":170940984,"user":{"login":"mfrasca","id":122869,"avatar_url":"https://avatars.githubusercontent.com/u/122869?v=3","gravatar_id":"","url":"https://api.github.com/users/mfrasca","html_url":"https://github.com/mfrasca","followers_url":"https://api.github.com/users/mfrasca/followers","following_url":"https://api.github.com/users/mfrasca/following{/other_user}","gists_url":"https://api.github.com/users/mfrasca/gists{/gist_id}","starred_url":"https://api.github.com/users/mfrasca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mfrasca/subscriptions","organizations_url":"https://api.github.com/users/mfrasca/orgs","repos_url":"https://api.github.com/users/mfrasca/repos","events_url":"https://api.github.com/users/mfrasca/events{/privacy}","received_events_url":"https://api.github.com/users/mfrasca/received_events","type":"User","site_admin":false},"created_at":"2016-01-12T15:05:44Z","updated_at":"2016-01-12T15:05:44Z","body":"ok, I'm reading your documentation. it's quite nice. thanks."}}