
Security News
NIST Under Federal Audit for NVD Processing Backlog and Delays
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
mysql-query-generator
Advanced tools
parses optional get parameters of a nodejs request url and generates a mysql query
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Unpopular package
QualityThis package is not very popular.
Found 1 instance in 1 package
new QueryGenerator(defaultLimit);
For security reasons the construtor allows for providing a default limit value. So if don't ever want to return more than x values, just put it in the constructor. If not, just leave it empty.
function generateQueryAddition(url)
/someUrl?column.modifier=value
column: column to be filtered modifier: type of filtering action value: value to be filtered for
###currently supported query modifiers: modifier => mysql code => example
###general:
###strings only
###numbers only:
illegal (those that are not supported) modifiers will be ignored
###exception ?limit=value limits the returned results to a certain number of entries and doesn't require any modifier
?name.rocks=7&email.contains=@gmail&id.greater=10&id.lessOrEqual=100&limit=8
would return "where email like '%@gmail%' and id > 10 and id <= 100 limit 8;"
note: name.rocks is an illegal modifier and therefore ignored
app.get('/someUrl', function(req, res){
var QueryGenerator = require('mysql-query-generator');
var handler = new QueryGenerator(100);
var queryAddition = handler.generateQueryAddition(req.url);
var completeQuery = 'select id, username, email from users ' + queryAddition;
});
// assuming a req.url querystring like so: ?username.is=john&email.contains=john.doe&id.greaterOrEqual=10&limit=5
// the complete query would be
var completeQuery = 'select id, username, email from users where name = \'john\' and email like \'%john.doe%\' and id >= 10 limit 5;
To prevent sql injections certain characters and keywords are not allowed like:
You can provide a default limit in the constructor to make sure no more than that number of entries is returned.
Check it out at NPM!. npm install mysql-query-generator
Easily generate simple queries using query-sql. Then automatically parse url get string and add the result as where clause for more extensive filtering.
FAQs
parses optional get parameters of a nodejs request url and generates a mysql query
The npm package mysql-query-generator receives a total of 2 weekly downloads. As such, mysql-query-generator popularity was classified as not popular.
We found that mysql-query-generator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
Research
Security News
Socket’s Threat Research Team has uncovered 60 npm packages using post-install scripts to silently exfiltrate hostnames, IP addresses, DNS servers, and user directories to a Discord-controlled endpoint.
Security News
TypeScript Native Previews offers a 10x faster Go-based compiler, now available on npm for public testing with early editor and language support.