Warning: file_get_contents(/data/phpspider/zhask/data//catemap/7/sqlite/3.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181

Warning: file_get_contents(/data/phpspider/zhask/data//catemap/8/design-patterns/2.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Node.js 输入值未存储在数据库中_Node.js_Sqlite_Node Sqlite3 - Fatal编程技术网

Node.js 输入值未存储在数据库中

Node.js 输入值未存储在数据库中,node.js,sqlite,node-sqlite3,Node.js,Sqlite,Node Sqlite3,我试图将表单上填写的数据存储到数据库中,但它无法存储。 这段代码的目标是使用一个html文件创建一个表单,一旦输入了数据,它就会保存在服务器上,并从服务器端显示在表上。我目前只能获取要显示的列名,但没有输入数据- var express = require('express'); var bodyParser = require("body-parser"); var sqlite3 = require("sqlite3").verbose(); var db = new sqlite3.Dat

我试图将表单上填写的数据存储到数据库中,但它无法存储。 这段代码的目标是使用一个html文件创建一个表单,一旦输入了数据,它就会保存在服务器上,并从服务器端显示在表上。我目前只能获取要显示的列名,但没有输入数据-

var express = require('express');
var bodyParser = require("body-parser");
var sqlite3 = require("sqlite3").verbose();
var db = new sqlite3.Database('myDBnaima3');

var app = express();

app.use(express.static('public_html'));

app.use(bodyParser.urlencoded({
   extended: false
 }));

app.post('/Contact', function (request, response, next) {
 let name = request.body.Name;
 let email = request.body.Email;
 let message = request.body.Message;

 //db.run('CREATE TABLE IF NOT EXISTS users (id INTEGER UNIQUE PRIMARY KEY NOT NULL, name TEXT NOT NULL, email TEXT NOT NULL);');
 var statement = db.run(`INSERT INTO users (name, email, message) VALUES    ("${name}","${email}","${message}");`);
 console.log("Information Entered Succesfully!");
 res.status(200).redirect('/'); 
});

app.get('/Contact', function (request, response, next) {
  db.all('SELECT * FROM users;', function (error, rows) {
     response.write(`<table border=1>`);
     response.write("<tr>");
     response.write(`<th>ID</th>`);
     response.write(`<th>Name</th>`);
     response.write(`<th>Message</th>`);
     response.write("</tr>");

     rows.forEach(row => {
         response.write("<tr>");
         response.write(`<td>${row["name"]}</td>`);
         response.write(`<td>${row["email"]}</td>`);
         response.write(`<td>${row["message"]}</td>`);
         response.write("</tr>");
     });
     response.write("</table>");
   });
 }); 

 app.listen(3000, function () {
   console.log("Web server running at: http://localhost:3000 NAIMA IS HERE AGAIN!!!!");
   console.log("Type Ctrl+C to shut down the web server");
  });

您没有检查插入是否成功。它可能会失败。您可以使用回调进行检查,该回调将在语句完成或出现错误时运行

将值直接粘贴到SQL中会使代码易受攻击,这是一个非常常见的安全问题和其他语法错误。例如,如果您的邮件包含一个插入,它将中断插入

您应该改为使用占位符

把它们放在一起,就像这样

db.run(
  "INSERT INTO users (name, email, message) VALUES ($name,$email,$message)",
  { $name: name, $email: email, $message: message },
  (error) => {
    if( error ) {
      console.log(`Insert failed: ${error}`);
      res.status(500);
    }
    else {
      console.log("Information Entered Succesfully!");
      res.status(200).redirect('/'); 
    }
  }
);
您的代码可以通过使用简化

这更简单、更有效。如果有很多用户,db.all会一次将所有行存储到内存中,这可能会占用大量内存。db.each将一次取一个

app.get('/Contact', function(request, response, next) {
  response.write(`<table border=1>`);
  response.write("<tr>");
  response.write(`<th>ID</th>`);
  response.write(`<th>Name</th>`);
  response.write(`<th>Message</th>`);
  response.write("</tr>");
  db.each('SELECT * FROM users;', function(error, row) {
    response.write("<tr>");
    response.write(`<td>${row["name"]}</td>`);
    response.write(`<td>${row["email"]}</td>`);
    response.write(`<td>${row["message"]}</td>`);
    response.write("</tr>");
  });
  response.write("</table>");
});