javascript - how to escape sql injections? -

I have encountered a problem that when I use SQL in the query like follow up: < Pre> sql = "select from chat, where keywords like% key%";

When I execute% param with this parameter, it will query all the results of this table. So how can I solve this problem?

  select from where customers like '% ground%';   
 you "symbol"