Joi-sql-injector-validator NPM

This is a lightweight npm library designed to validate SQL injection attacks in user input npm version size

joi-sql-injector-validator

Joi SQL Injection Validator is a lightweight npm library designed to validate SQL injection attacks in user input using Joi, a popular validation library for Node.js. This library provides a set of pre-built Joi validation schemas for various types of user input such as strings, numbers, dates, and arrays that can be easily integrated into any Node.js project.

Prerequisites

This project requires NodeJS (version 8 or later) and NPM. Node and NPM are really easy to install. To make sure you have them available on your machine, try running the following command.

$ npm -v && node -v
6.4.1
v8.16.0

Getting Started

These instructions will help you to install this package in your project to perform data validation.

How to use

This joi-sql-injector-validator package includes all available validation method which is available here JOI Official doc at - https://joi.dev/api/
along with more powerful validation sqlInjectionFilter() for avoiding SQL Injection attacks

Installation

BEFORE YOU INSTALL: please read the prerequisites

Start with installation of package in your project:

$ cd PROJECT
$ npm i joi-sql-injector-validator

After successful installation of package you need to import package in your file: To import complete package in once

$ import JOI from 'joi-sql-injector-validator';

SQL Injection validation example

const JOI = require('joi-sql-injector-validator');

const schema = JOI.string().sqlInjectionFilter();

const validValue = 'This is a valid value';
const invalidValue = 'SELECT * FROM users';

const { error: validError, value: validOutput } = schema.validate(validValue);
const { error: invalidError, value: invalidOutput } = schema.validate(invalidValue);

console.log(validOutput); // Output: This is a valid value
console.log(validError); // Output: undefined

console.log(invalidOutput); // Output: undefined
console.log(invalidError); // Output: ValidationError: String shouldn't contain any SQL injection commands

const JOI = require('joi-sql-injector-validator');

const schema = Joi.object()
  .keys({
    name: Joi.string()
    .sqlInjectionFilter()
      .min(3)
      .max(40)
      .required(),
    age: Joi.number()
      .integer()
      .min(16)
  });

  const {
    error
  } = schema.validate({name:"test OR 1=1; DROP users;", age:15});
  if (error) {
    //It will give error "String shouldn't contain any SQL injection commands"
   console.log("validation error", error.details)
  } else {
    console.log("validation passed")
  }

Other Examples

const JOI = require('joi-sql-injector-validator');


const schema = JOI.object({
    username: JOI.string()
        .alphanum()
        .min(3)
        .max(30)
        .required(),

    password: JOI.string()
        .pattern(new RegExp('^[a-zA-Z0-9]{3,30}$')),

    repeat_password: JOI.ref('password'),

    access_token: [
        JOI.string(),
        JOI.number()
    ],

    birth_year: JOI.number()
        .integer()
        .min(1900)
        .max(2013),

    email: JOI.string()
        .email({ minDomainSegments: 2, tlds: { allow: ['com', 'net'] } })
})
    .with('username', 'birth_year')
    .xor('password', 'access_token')
    .with('password', 'repeat_password');


schema.validate({ username: 'abc', birth_year: 1994 });
// -> { value: { username: 'abc', birth_year: 1994 } }

schema.validate({});
// -> { value: {}, error: '"username" is required' }

// Also -

try {
    const value = await schema.validateAsync({ username: 'abc', birth_year: 1994 });
}
catch (err) { }

Other example

const Joi = = require("joi-sql-injector-validator");

const schema = Joi.object()
  .keys({
    name: Joi.string()
      .min(3)
      .max(40)
      .required(),
    age: Joi.number()
      .integer()
      .min(16)
  });

  const {
    error
  } = schema.validate({name:"test", age:15});
  if (error) {
   console.log("validation error", error.details)
  } else {
    console.log("validation passed")
  }