Why SQL integration matters in Express - Test Your Understanding

Practice - 5 Tasks

1fill in blank

easy

Complete the code to import the SQL library in an Express app.

Express

const sql = require('[1]');

Drag options to blanks, or click blank then click option'

Amysql

Bfs

Chttp

Dexpress

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'express' instead of the SQL library name.

Using 'http' or 'fs' which are unrelated to SQL.

The mysql package is used to connect SQL databases with Express apps.

2fill in blank

medium

Complete the code to create a connection to the SQL database.

Express

const connection = sql.createConnection({ host: 'localhost', user: 'root', password: '[1]', database: 'testdb' });

Drag options to blanks, or click blank then click option'

A1234

Bpassword123

Cexpress

Droot

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'root' as password instead of the actual password.

Using 'express' which is unrelated.

The password field should be the actual password string for the database user.

3fill in blank

hard

Fix the error in the query execution code by completing the blank.

Express

connection.query('SELECT * FROM users', function(err, results) { if (err) throw [1]; console.log(results); });

Drag options to blanks, or click blank then click option'

Aerror

Bexception

Cerr

Dresults

Attempts:

3 left

💡 Hint

Common Mistakes

Throwing 'error' which is undefined here.

Throwing 'results' which is the data, not the error.

The error object passed to the callback is named err, so we throw err to handle errors properly.

4fill in blank

hard

Fill both blanks to create a simple Express route that queries the database and sends results.

Express

app.get('/users', (req, res) => { connection.query('[1]', (err, results) => { if (err) return res.status(500).send(err); res.[2](results); }); });

Drag options to blanks, or click blank then click option'

ASELECT * FROM users

Bsend

Cjson

DSELECT * FROM products

Attempts:

3 left

💡 Hint

Common Mistakes

Using the wrong table name in the query.

Using res.send() which sends raw data, not JSON.

The SQL query should select all users. The response should send JSON data to the client.

5fill in blank

hard

Fill all three blanks to handle a POST request that inserts a new user into the database.

Express

app.post('/add-user', (req, res) => { const { name, email } = req.body; const query = 'INSERT INTO users (name, email) VALUES (?, ?)'; connection.query(query, [[1], [2]], (err, results) => { if (err) return res.status(500).send(err); res.[3]({ message: 'User added', id: results.insertId }); }); });

Drag options to blanks, or click blank then click option'

Aname

Bemail

Cjson

Dres.send

Attempts:

3 left

💡 Hint

Common Mistakes

Passing wrong variables to the query parameters.

Using res.send instead of res.json.

We pass name and email from the request body as parameters to the query. Then respond with JSON to confirm success.

Practice

1. Why is SQL integration important in an Express app?

easy

A. It allows the app to store and retrieve data from a database.

B. It makes the app run faster without any database.

C. It automatically creates user interfaces for the app.

D. It replaces the need for JavaScript in the app.

Solution

1. Step 1: Understand the role of SQL in Express

   SQL integration connects the app to a database to save and get data.

2. Step 2: Compare options

   Only It allows the app to store and retrieve data from a database. correctly states this role; others describe unrelated features.

3. Final Answer:

   It allows the app to store and retrieve data from a database. -> Option A

4. Quick Check:

   SQL integration = data storage and retrieval [OK]

Hint: SQL integration means working with databases [OK]

Common Mistakes:

• Thinking SQL speeds up app without database
• Confusing SQL with UI creation
• Believing SQL replaces JavaScript

2. Which of the following is the correct way to use SQL in an Express app with a query?

easy

A. db.query('SELECT * FROM users' callback);

B. db.query(SELECT * FROM users, callback);

C. db.query('SELECT * FROM users');

D. db.query('SELECT * FROM users', callback);

Solution

1. Step 1: Check SQL query syntax in JavaScript

   The query string must be inside quotes and followed by a callback function.

2. Step 2: Identify correct syntax

   db.query('SELECT * FROM users', callback); correctly uses quotes and a comma before the callback; others miss quotes or commas.

3. Final Answer:

   db.query('SELECT * FROM users', callback); -> Option D

4. Quick Check:

   Correct query syntax = db.query('SELECT * FROM users', callback); [OK]

Hint: SQL query strings need quotes and commas [OK]

Common Mistakes:

• Omitting quotes around SQL query
• Missing comma before callback
• Passing callback without parentheses

3. What will this Express code output if the database has 3 users?

db.query('SELECT COUNT(*) AS count FROM users', (err, results) => {
  if (err) throw err;
  console.log(results[0].count);
});

medium

A. 3

B. undefined

C. Error

D. 0

Solution

1. Step 1: Understand the SQL query

   The query counts rows in users table and returns count as 'count'.

2. Step 2: Check the callback output

   results[0].count accesses the count value; if 3 users exist, it logs 3.

3. Final Answer:

   3 -> Option A

4. Quick Check:

   COUNT(*) returns number of rows = 3 [OK]

Hint: COUNT(*) returns number of rows in table [OK]

Common Mistakes:

• Expecting results as a number, not array
• Confusing property name 'count'
• Ignoring error handling

4. Find the error in this Express SQL integration code:

db.query('SELECT * FROM products' (err, results) => {
  if (err) console.log(err);
  else console.log(results);
});

medium

A. Callback function should be outside the query method.

B. Query string should not be in quotes.

C. Missing comma between query string and callback function.

D. Error handling should use throw instead of console.log.

Solution

1. Step 1: Check method call syntax

   Method arguments must be separated by commas; here comma is missing between query and callback.

2. Step 2: Validate other options

   Callback inside query is correct, query string needs quotes, and console.log is valid error handling.

3. Final Answer:

   Missing comma between query string and callback function. -> Option C

4. Quick Check:

   Comma separates arguments in function calls [OK]

Hint: Check commas between function arguments [OK]

Common Mistakes:

• Forgetting commas between parameters
• Moving callback outside query call
• Removing quotes from SQL string

5. You want to safely insert a new user into the database in Express to avoid SQL injection. Which code snippet is best?

hard

A. db.query(`INSERT INTO users (name) VALUES ('${userName}')`);

B. db.query('INSERT INTO users (name) VALUES (?)', [userName]);

C. db.query('INSERT INTO users (name) VALUES (' + userName + ')');

D. db.query('INSERT INTO users (name) VALUES ($userName)');

Solution

1. Step 1: Understand SQL injection risk

   Directly inserting variables into query strings risks injection attacks.

2. Step 2: Identify safe query method

   Using placeholders like '?' with parameter arrays safely escapes inputs; db.query('INSERT INTO users (name) VALUES (?)', [userName]); does this.

3. Final Answer:

   db.query('INSERT INTO users (name) VALUES (?)', [userName]); -> Option B

4. Quick Check:

   Use placeholders and parameters to prevent SQL injection [OK]

Hint: Use ? placeholders with values array for safety [OK]

Common Mistakes:

• Using string interpolation directly in query
• Concatenating strings without escaping
• Using unsupported variable syntax in SQL