Preventing MySQL Injections with NodeJS

The node-mysql module has an escape function:

client.escape(val) Escapes a single val for use inside of a sql string.