You’re probably better off dealing with the database server interaction with whatever server-side language you’re using and then passing the data from the server-side language to javascript using JSON (AJAX), the reason for this is that the server side language will have methods for using prepared statements which eliminate the risk of SQL Injection attacks