react2-week2/shahnawaz

.babelrc

@@ -0,0 +1,7 @@
+{
+  "presets": ["@babel/preset-env", "@babel/preset-react"],
+  "plugins": [
+    "@babel/plugin-transform-runtime",
+    "@babel/plugin-proposal-class-properties"
+  ]
+}

.env

@@ -0,0 +1,17 @@
+# Database - change to fit your database
+DB_HOST = 0.0.0.0
+DB_USER = root
+DB_PASSWORD = password1
+DB_NAME = Meals
+DB_PORT = 3306
+
+NODE_ENV=development
+
+# Your API will run on this port
+API_PORT="5000"
+
+# The path the API will run from
+API_PATH="/api"
+
+# Your Client will run on this port
+CLIENT_PORT="3000"

.gitignore

@@ -1,2 +1,2 @@
-node_modules
+node_modules
 .DS_Store

6_nodejs/week3/app.js

@@ -0,0 +1,62 @@
+
+
+
+
+const knex = require("knex")({
+    client: "mysql2",
+    connection: {
+      host: process.env.DB_HOST || "127.0.0.1",
+      port: process.env.DB_PORT || 3306,
+      user: process.env.DB_USER || "root",
+      password: process.env.DB_PASSWORD || "password1",
+      database: process.env.DB_NAME || "hyf_node_week3_warmup",
+      multipleStatements: true,
+    },
+  });
+
+  const express = require("express");
+  const app = express();
+  const port = process.env.PORT || 3000;
+
+  app.use(express.json());
+
+  const apiRouter = express.Router();
+  app.use("/api", apiRouter);
+
+  const contactsAPIRouter = express.Router();
+  apiRouter.use("/contacts", contactsAPIRouter);
+
+
+  // URL with injections for test http://localhost:3000/api/contacts?sort=last_name;%20DROP%20TABLE%20contacts;%20DESC
+
+  contactsAPIRouter.get("/", async (req, res) => {
+    let query = knex.select("*").from("contacts");
+
+    if ("sort" in req.query) {
+        const orderBy = req.query.sort.toString();
+        if (orderBy.length > 0) {
+            const [column, order] = orderBy.split(' ');
+            if (column && order && (order.toUpperCase() === 'ASC' || order.toUpperCase() === 'DESC')) {
+                query = query.orderBy(column, order);
+            } else {
+                res.status(400).json({ error: "Invalid sort parameter" });
+                return;
+            }
+        }
+    }
+
+    const sql = query.toSQL().toNative();
+    console.log("SQL", sql);
+
+    try {
+        const data = await query;
+        res.json({ data });
+    } catch (e) {
+        console.error(e);
+        res.status(500).json({ error: e.message });
+    }
+  });
+
+  app.listen(port, () => {
+    console.log(`Listening on port ${port}`);
+  });