Why file upload handling matters in Express - See It in Action

Why file upload handling matters

📖 Scenario: You are building a simple web server using Express.js that allows users to upload profile pictures. Handling file uploads correctly is important to keep the server safe and working well.

🎯 Goal: Create an Express.js server that accepts a file upload from a user and saves it safely on the server.

📋 What You'll Learn

Create an Express app with a POST route for file uploads

Use the multer middleware to handle file uploads

Configure multer to save files to a folder named uploads

Add basic file size limit configuration

Respond with a success message after upload

💡 Why This Matters

🌍 Real World

File upload handling is essential for websites that allow users to share images, documents, or other files safely and efficiently.

💼 Career

Understanding file upload handling is important for backend developers to build secure and user-friendly web applications.

1

Set up Express app and import multer

Create a file named app.js. Import express and multer. Create an Express app by writing const app = express().

Express

const express = require('express')
const multer = require('multer')

const app = express()

// Your code here

Hint

Use require to import both express and multer. Then create the app with express().

2

Configure multer storage and file size limit

Create a multer storage configuration that saves files to a folder named uploads. Then create an upload middleware using multer({ storage, limits: { fileSize: 1000000 } }) to limit file size to 1MB.

Express

const express = require('express')
const multer = require('multer')

const app = express()

// Configure multer storage and limits
// Your code here

Hint

Use multer.diskStorage to set the destination folder and filename. Then create upload with the storage and a 1MB file size limit.

3

Create POST route to handle file upload

Add a POST route at /upload that uses the upload.single('profilePic') middleware to accept a single file named profilePic. Inside the route handler, send a JSON response with { message: 'File uploaded successfully' }.

Express

const express = require('express')
const multer = require('multer')

const app = express()

const storage = multer.diskStorage({
  destination: function (req, file, cb) {
    cb(null, 'uploads')
  },
  filename: function (req, file, cb) {
    cb(null, file.originalname)
  }
})

const upload = multer({ storage: storage, limits: { fileSize: 1000000 } })

// Add POST /upload route here
// Your code here

Hint

Use app.post with the path /upload. Use upload.single('profilePic') as middleware. Send a JSON success message in the response.

4

Start the Express server

Add code to start the Express server on port 3000 by calling app.listen(3000). Inside the listen callback, log 'Server started on port 3000'.

Express

const express = require('express')
const multer = require('multer')

const app = express()

const storage = multer.diskStorage({
  destination: function (req, file, cb) {
    cb(null, 'uploads')
  },
  filename: function (req, file, cb) {
    cb(null, file.originalname)
  }
})

const upload = multer({ storage: storage, limits: { fileSize: 1000000 } })

app.post('/upload', upload.single('profilePic'), (req, res) => {
  res.json({ message: 'File uploaded successfully' })
})

// Start the server on port 3000
// Your code here

Hint

Use app.listen with port 3000 and add a callback that logs the server start message.

Practice

1. Why is handling file uploads carefully important in an Express app?

easy

A. To prevent security risks like uploading harmful files

B. Because it makes the app run faster

C. To reduce the size of the app's code

D. Because Express requires it for routing

Solution

1. Step 1: Understand the risks of file uploads

   Uploading files without checks can allow harmful files that damage the server or steal data.

2. Step 2: Recognize the importance of safe handling

   Careful handling means validating and controlling files to keep the app secure.

3. Final Answer:

   To prevent security risks like uploading harmful files -> Option A

4. Quick Check:

   File upload safety = Prevent security risks [OK]

Hint: Think about what bad files could do to your app [OK]

Common Mistakes:

• Assuming file uploads only affect speed
• Thinking file uploads reduce app size
• Believing Express forces file upload handling

2. Which of the following is the correct way to include multer middleware for file uploads in Express?

easy

A. import multer from 'multer'; app.use(multer.single('file'));

B. const multer = require('multer'); app.use(multer().single('file'));

C. const multer = require('multer'); app.use(multer.single('file'));

D. const multer = require('multer'); app.use(multer().array('file'));

Solution

1. Step 1: Recall multer import and usage

   Multer is imported with require('multer') and called as multer() to create middleware.

2. Step 2: Check correct middleware method

   To handle a single file, use .single('fieldname') on the multer instance.

3. Final Answer:

   const multer = require('multer'); app.use(multer().single('file')); -> Option B

4. Quick Check:

   Multer setup = require + multer() + .single() [OK]

Hint: Remember multer() creates middleware, then call .single() [OK]

Common Mistakes:

• Forgetting to call multer() before .single()
• Using import syntax without ES modules
• Calling .single() directly on multer without ()

3. What will happen if you try to upload a file without using any middleware like multer in Express?

medium

A. The file will be automatically saved in the uploads folder

B. Express will throw a syntax error

C. The request will not contain the file data in req.file or req.files

D. The file will be converted to JSON automatically

Solution

1. Step 1: Understand Express default behavior

   Express does not parse multipart/form-data by default, so file data is not processed.

2. Step 2: Check what happens without multer

   Without multer or similar middleware, req.file or req.files will be undefined because Express ignores file data.

3. Final Answer:

   The request will not contain the file data in req.file or req.files -> Option C

4. Quick Check:

   No middleware = no req.file data [OK]

Hint: No multer means no file data in request object [OK]

Common Mistakes:

• Assuming Express saves files automatically
• Expecting syntax errors without middleware
• Thinking files convert to JSON automatically

4. You wrote this Express route to handle file uploads but get an error:

app.post('/upload', (req, res) => { console.log(req.file); res.send('Done'); });

What is missing?

medium

A. You forgot to add multer middleware to parse the file

B. You need to use res.json() instead of res.send()

C. You should use req.files instead of req.file

D. You must import fs module to handle files

Solution

1. Step 1: Identify missing middleware

   The route logs req.file but does not use multer middleware to parse the incoming file.

2. Step 2: Understand multer's role

   Multer middleware is required to process multipart/form-data and populate req.file.

3. Final Answer:

   You forgot to add multer middleware to parse the file -> Option A

4. Quick Check:

   Missing multer middleware = req.file undefined [OK]

Hint: Always add multer middleware before route handler [OK]

Common Mistakes:

• Thinking res.send() causes error
• Confusing req.file with req.files without middleware
• Assuming fs import fixes upload parsing

5. You want to restrict uploads to only images and limit file size to 1MB using multer in Express. Which approach correctly applies these restrictions?

hard

A. Use multer({ fileFilter: (req, file, cb) => { cb(null, true); }, limits: { fileSize: 10000000 } })

B. Use multer({ fileFilter: (req, file, cb) => { if(file.extension === '.jpg') cb(null, true); else cb(null, false); }, limits: { maxSize: 1 } })

C. Use multer({ filter: (file) => file.type === 'image', sizeLimit: 1000000 })

D. Use multer({ fileFilter: (req, file, cb) => { if(file.mimetype.startsWith('image/')) cb(null, true); else cb(null, false); }, limits: { fileSize: 1 * 1024 * 1024 } })

Solution

1. Step 1: Check fileFilter usage

   fileFilter is a function with (req, file, cb) parameters that decides if file is accepted based on mimetype.

2. Step 2: Verify file size limit

   limits.fileSize sets max size in bytes; 1MB = 1 * 1024 * 1024 bytes.

3. Step 3: Compare options

   Use multer({ fileFilter: (req, file, cb) => { if(file.mimetype.startsWith('image/')) cb(null, true); else cb(null, false); }, limits: { fileSize: 1 * 1024 * 1024 } }) correctly uses fileFilter with mimetype check and sets fileSize limit properly.

4. Final Answer:

   Use multer({ fileFilter: (req, file, cb) => { if(file.mimetype.startsWith('image/')) cb(null, true); else cb(null, false); }, limits: { fileSize: 1 * 1024 * 1024 } }) -> Option D

5. Quick Check:

   fileFilter + limits.fileSize = Use multer({ fileFilter: (req, file, cb) => { if(file.mimetype.startsWith('image/')) cb(null, true); else cb(null, false); }, limits: { fileSize: 1 * 1024 * 1024 } }) [OK]

Hint: Use fileFilter with mimetype and limits.fileSize in bytes [OK]

Common Mistakes:

• Checking file extension instead of mimetype
• Using wrong property names like maxSize or filter
• Setting fileSize limit too high or missing units