Express/Node用户控制器在服务器上上传文件，MySQL抛出SQL语法错误

我正在按照下面的代码创建一个用户控制器export.update。

一旦在前端提交POST请求，控制器应执行以下操作：

• 上传文件夹updload上的文件
• 在MySql数据库中插入图片的名称

当我点击提交按钮时，文件在专用文件夹上上传成功，但没有数据传输到MySql。相反，我在终端上收到了这条消息：

sqlMessage: "You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'WHERE id = '203'' at line 1", sqlState: '42000', index: 0, sql: "UPDATE user SET first_name='John' ,last_name='Doe', profile_image='rocket-lab-New-Zealand.jpeg',WHERE id = '203'"

我们非常感谢任何关于正确道路的建议/指导。

exports.update = (req, res) => {
message = '';
if (req.method == 'POST') {
var post = req.body;
var first_name = post.first_name;
var last_name = post.last_name;

if (!req.files)
return res.status(400).send('No files were uploaded.');
var file = req.files.profile_image;

var profile_image = file.name;
console.log(profile_image)
if (file.mimetype == "image/jpeg" || file.mimetype == "image/png" || file.mimetype == "image/gif") {
file.mv('./upload/' + file.name, function (err) {
if (err)
return res.status(500).send(err);
connection.query('UPDATE user SET first_name=? ,last_name=?, profile_image=?,WHERE id = ?', [first_name, last_name, profile_image, req.params.id], (err, rows) => {
if (!err) {
connection.query('SELECT * FROM user WHERE id = ?', [req.params.id], (err, rows) => {
if (!err) {
res.render('edit-crew', { rows, alert: `${first_name} has been updated.` });
} else {
console.log(err);
}
console.log('The data from user table:n', rows);
});
} else {
console.log(err);
}
console.log('The data from user table:n', rows);
});
});
}
}
}