use traditional positional parameters on insert into select

session_insert_test.go

@@ -943,6 +943,20 @@ func TestInsertWhere(t *testing.T) {
 	assert.EqualValues(t, 5, j5.Index)
 }
 
+func TestInsertSelectPositionalParameter(t *testing.T) {
+	assert.NoError(t, prepareEngine())
+
+	type InsertSelect struct {
+		Id   int64
+		Name string
+	}
+
+	assertSync(t, new(InsertSelect))
+
+	_, err := testEngine.Exec("INSERT INTO insert_select (name) SELECT ?", "xlw")
+	assert.NoError(t, err)
+}
+
 type NightlyRate struct {
 	ID int64 `xorm:"'id' not null pk BIGINT(20)" json:"id"`
 }

statement_args.go

@@ -75,6 +75,8 @@ func convertArg(arg interface{}, convertFunc func(string) string) string {
 	return fmt.Sprintf("%v", arg)
 }
 
+const insertSelectPlaceHolder = true
+
 func (statement *Statement) writeArg(w *builder.BytesWriter, arg interface{}) error {
 	switch argv := arg.(type) {
 	case bool:
@@ -110,12 +112,19 @@ func (statement *Statement) writeArg(w *builder.BytesWriter, arg interface{}) er
 			return err
 		}
 	default:
-		var convertFunc = convertStringSingleQuote
+		if insertSelectPlaceHolder {
-		if statement.Engine.dialect.DBType() == core.MYSQL {
+			if err := w.WriteByte('?'); err != nil {
-			convertFunc = convertString
+				return err
-		}
+			}
-		if _, err := w.WriteString(convertArg(arg, convertFunc)); err != nil {
+			w.Append(arg)
-			return err
+		} else {
+			var convertFunc = convertStringSingleQuote
+			if statement.Engine.dialect.DBType() == core.MYSQL {
+				convertFunc = convertString
+			}
+			if _, err := w.WriteString(convertArg(arg, convertFunc)); err != nil {
+				return err
+			}
 		}
 	}
 	return nil