Crud app v2 #15
Crud app v2 #15
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| app.get('/table/:dbName/:tableName', async (req, res) => { | ||
| const { dbName, tableName } = req.params; | ||
| try { | ||
| const [rows] = await mysqlConnection.query(`SELECT * FROM ${dbName}.${tableName}`); |
Check failure
Code scanning / SonarCloud
Database queries should not be vulnerable to injection attacks High
| const placeholders = values.map(() => '?').join(', '); | ||
|
|
||
| try { | ||
| const [result] = await mysqlConnection.query(`INSERT INTO ${dbName}.${tableName} (${columns}) VALUES (${placeholders})`, values); |
Check failure
Code scanning / SonarCloud
Database queries should not be vulnerable to injection attacks High
| const values = [...Object.values(data), id]; | ||
|
|
||
| try { | ||
| const [result] = await mysqlConnection.query(`UPDATE ${dbName}.${tableName} SET ${updates} WHERE id = ?`, values); |
Check failure
Code scanning / SonarCloud
Database queries should not be vulnerable to injection attacks High
| const { dbName, tableName, id } = req.params; | ||
|
|
||
| try { | ||
| const [result] = await mysqlConnection.query(`DELETE FROM ${dbName}.${tableName} WHERE id = ?`, [id]); |
Check failure
Code scanning / SonarCloud
Database queries should not be vulnerable to injection attacks High
No description provided.