Skip to content

WM5 | ADNIYA YOUSAF | MODULE DATABASE | E-COMMERCE-API | WEEK 4 - #164

Open
adniyaYousaf wants to merge 8 commits into
CodeYourFuture:mainfrom
adniyaYousaf:e-commerce-API
Open

WM5 | ADNIYA YOUSAF | MODULE DATABASE | E-COMMERCE-API | WEEK 4#164
adniyaYousaf wants to merge 8 commits into
CodeYourFuture:mainfrom
adniyaYousaf:e-commerce-API

Conversation

@adniyaYousaf

Copy link
Copy Markdown

No description provided.

Comment threadE-Commerce-API/app.js Outdated
console.log(req.params.name);
try {
const name = req.params.name;
const result = await db.query(`SELECT product_name FROM products WHERE product_name ILIKE '%${name}%';`);

Check failure

Code scanning / SonarCloud

Database queries should not be vulnerable to injection attacks

<!--SONAR_ISSUE_KEY:AY-X_icjYaYa25wtkk93-->Change this code to not construct SQL queries directly from user-controlled data. <p>See more on <a href="https://sonarcloud.io/project/issues?id=CodeYourFuture_Module-Databases&issues=AY-X_icjYaYa25wtkk93&open=AY-X_icjYaYa25wtkk93&pullRequest=164">SonarCloud</a></p>
@sonarqubecloud

Copy link
Copy Markdown

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@adniyaYousaf@github-advanced-security