
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
accessor_sqlite
Advanced tools
A simple wraper for developer to access their SQLite database without writing SQL code
A MySQL database wrapper, provide easy access to database without writing SQL code
Install through npm, following command will do that:
npm install Accessor_SQLite
Create a config directory under your application, and create a database.js under that, which may contain like:
exports.db_path = "path to database";
Now, Accessor_SQLite is ready to use.
Require the Accessor module in your script
var Accessor = require("Accessor");
Place constructor where you need the Accessor. Do not forget to specify your database engine.
var tester = Accessor("YOUR_TARGET_TABLE", "SQLite");
After initialization, Accessor will try to obtain the schema, and store it to verify column existence while updating or creating.
Perform a select query to obtain data, for example:
// test_table schema: id, name, email
var tester = Accessor("test_table");
var options = {
where: [
["id", ">", 10],
"AND",
["email","LIKE","%@gmail.com"]
],
limit: 100,
offset: 50,
fields: ["name"]
};
tester.select( options, function(err, data, fields) {
if(err) {
throw err;
}
return data;
} );
Currently, {options} has implements following attributes:
Options may omit which retrieve all records, i.e.
// test_table schema: id, name, email
var tester = Accessor("test_table");
tester.select( function(err, data, fields) {
if(err) {
throw err;
}
return data;
} );
Insert data record by given dataObject
// test_table schema: id, name, email
var tester = Accessor("test_table");
var dataObject = {
name: "bu",
email: "bu@hax4.in",
nonSchemaColumn: "test"
};
tester.create( dataObject, function(err, info) {
if(err) {
throw err;
}
return info.insertId;
} );
On above example, we give a non-exist column called "nonSchemaColumn" to Accessor, which may cause hangup if we insert that to sql query.
Indeed, Accessor will try to check each attribute and ignore them if not exists, and that should print (on console)
Warning: nonSchemaColumn is not in database schema, and is not inserted into queryset
Update records filter by option.where with updated_dataObject
// test_table schema: id, name, email
var tester = Accessor("test_table");
var dataObject = {
email: "bu@hax4.in",
nonSchemaColumn: "test"
};
var options = {
where: [
["name", "=", "bu"]
],
};
tester.update( options, dataObject, function(err, info) {
if(err) {
throw err;
}
return info.affectedRows;
} );
On above example, we give a non-exist column called "nonSchemaColumn" to Accessor, which may cause hangup if we update that in sql query.
Indeed, Accessor will try to check each attribute and ignore them if not exists, and that should print (on console)
Warning: nonSchemaColumn is not in database schema, and is not inserted into queryset
If options is omitted, it will update all records. (due to no filter)
// test_table schema: id, name, email
var tester = Accessor("test_table");
var dataObject = {
email: "bu@hax4.in",
nonSchemaColumn: "test"
};
tester.update( {}, dataObject, function(err, info) {
if(err) {
throw err;
}
return info.affectedRows;
} );
Remove records filter by options.where
// test_table schema: id, name, email
var tester = Accessor("test_table");
var options = {
where: [
["name", "=", "bu"]
],
};
tester.update( options, function(err, info) {
if(err) {
throw err;
}
return info.affectedRows;
} );
If options is omitted, it will remove all records. (due to no filter)
// test_table schema: id, name, email
var tester = Accessor("test_table");
tester.remove( {}, function(err, info) {
if(err) {
throw err;
}
return info.affectedRows;
} );
You can register to some methods, that will notify when such things occured. (e.g. UPDATE)
// following example will register a function that print out trigger event name
var Accessor = require("Accesor");
var Log = Accessor("Log", "MySQL");
// methods can be register are SELECT, CREATE, UPDATE, REMOVE, INIT
var register_methods = ["SELECT", "DELETE", "CREATE", "INIT", "UPDATE"];
Log.registerObserver(register_methods, function(event){
console.log(event);
});
Copyright (c) 2012 Buwei Chiu bu@hax4.in
Licensed under the MIT License
FAQs
A simple wraper for developer to access their SQLite database without writing SQL code
The npm package accessor_sqlite receives a total of 6 weekly downloads. As such, accessor_sqlite popularity was classified as not popular.
We found that accessor_sqlite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.