nodeJS中的Mysql语句

var User = {
	// 查询用户名
	queryUserName(params){
		return "select * from user where userName = '"+params.userName+"' or phoneNumber = '" + params.userName + "'";
	},
	// 验证用户名和密码
	queryUserPassWord(params){
		// return 'select * from user where userName=' + params.userName + ' or phoneNumber='+ params.userName + ' and passWord='+ params.passWord;
		return "select * from user where userName = '"+params.userName+"' or phoneNumber = '" + params.userName + "' and passWord = '" + params.passWord+ "'";  
	},
	// 增加一条用户数据
	addUser(params){
		return 'insert into user(userName,passWord,phoneNumber,imgUrl,nickName, token) values (?,?,?,?,?,?)';
	}
}

connection.query( "insert into address (name,phone,province,city,district,details,defaultDistrict,userId) values ('"+ name +"','"+ phone +"','"+ province +"','"+ city +"','"+ district +"','"+ details  +"','"+ defaultDistrict  +"','"+ userId +"')", function (error, results, fields) {
		if(error){
			console.log('数据库查询出错：', error)
			return;
		}
	})