Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
express-mysql-connection
Advanced tools
一个能让你更方便连接并操作mysql的express中间件。将mysql的连接挂载到request对象上
npm install express-mysql-connection
single
- 创建单个数据库连接,连接不会自动关闭,断开会自动尝试重连。 creates single database connection for an application instance. Connection is never closed. In case of disconnection it will try to reconnect again as described in node-mysql docs.pool
- 使用连接池进行数据库连接,并且使用的连接会在请求响应后自动释放回连接池。 creates pool of connections on an app instance level, and serves a single connection from pool per request. The connections is auto released to the pool at the response end.request
- 创建单个数据库连接,会在请求响应后自动关闭。 creates new connection per each request, and automatically closes it at the response end.var mysql = require('mysql'); // 需要引入mysql模块
var myConn = require('express-mysql-connection'); //引入本模块
var dbOptions = {
host: 'localhost',
user: 'dbuser',
password: 'password',
port: 3306,
database: 'mydb'
} // 数据库配置
var useConnRoutRs = ['/api', '/test']; // 声明需要使用数据库的路径
app.use(useConnRoutRs, myConn(mysql, dbOptions, 'pool')); // 使用
// 当然你也可以全局使用:
// app.use(myConn(mysql, dbOptions, 'pool'));
基本用法
app.get('api/foods', function(req, res, next) {
var sql = 'SELECT * FROM food';
// 获取连接
req.getConnection(function(err, conn) {
if(!err) {
// 执行sql查询
conn.query(sql,function(err, sqlResult) {
if(!err) {
// 响应结果
res.json(sqlResult);
}else {
throw err;
}
});
}else {
throw err;
}
});
});
FAQs
express-mysql-connection middleware
We found that express-mysql-connection demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.