How to Handle Query Parameters in Node.js Easily

In Node.js, you can handle query parameters by using the built-in URL and URLSearchParams classes to parse the request URL. When using Express.js, access query parameters easily via req.query as an object containing key-value pairs.

Why This Happens

Developers often try to access query parameters directly from the request URL string without parsing it properly. This causes errors or unexpected results because the raw URL is just a string, not a parsed object.

javascript

import http from 'http';

const server = http.createServer((req, res) => {
  // Trying to get query parameters directly from URL string
  const query = req.url.split('?')[1];
  res.end(`Query parameters: ${query}`);
});

server.listen(3000, () => console.log('Server running on http://localhost:3000'));

Output

Query parameters: name=John&age=30

The Fix

Use the URL and URLSearchParams classes to parse the full request URL and extract query parameters safely. In Express.js, use req.query which automatically parses query parameters into an object.

javascript

import http from 'http';

const server = http.createServer((req, res) => {
  const url = new URL(req.url, `http://${req.headers.host}`);
  const name = url.searchParams.get('name');
  const age = url.searchParams.get('age');
  res.end(`Name: ${name}, Age: ${age}`);
});

server.listen(3000, () => console.log('Server running on http://localhost:3000'));

Output

Name: John, Age: 30

Prevention

Always parse query parameters using built-in URL utilities or framework helpers instead of manual string manipulation. Use Express.js for easier handling with req.query. Validate and sanitize query values to avoid security issues.

• Use URL and URLSearchParams in Node.js.
• Use req.query in Express.js.
• Validate inputs to prevent injection attacks.

Related Errors

Common mistakes include:

• Accessing req.url directly without parsing, leading to raw strings instead of objects.
• Using deprecated or legacy query parsing libraries.
• Not handling missing or malformed query parameters, causing runtime errors.

Key Takeaways

Use Node.js built-in URL and URLSearchParams to parse query parameters safely.

In Express.js, access query parameters easily with req.query as an object.

Avoid manual string splitting of URLs to prevent errors and bugs.

Always validate and sanitize query parameter values for security.

Use framework helpers to simplify and standardize query handling.