Skip to content

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

node-red-contrib-sqlstring

A Node-RED node for formatting SQL-Queries to avoid SQL-Injections.

screenshot

The commonly used node-red-node-mysql allows SQL-Injections (one of most common security risks for web applications).

SQL-Queries with user provided variables, have to be secured.

The sqlstring-format node creates SQL-Queries and escapes provided variables.

The escaping is performed with: https://github.com/mysqljs/sqlstring (library with 500k downloads per week)

Example

example-flow example-properties

About

Format SQL-Queries to avoid SQL-Injections - For Node-RED

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages