Secure Your Node.js Web Application

Real knowledge is to know the extent of one’s ignorance.

Confucius

Chapter 5Secure Your Database Interactions

In the last chapter we covered how to identify code injection attacks and ways to defend your server and processes. We’ll continue by learning about database security and especially about how most injection attacks target it.

The database is the heart of most modern web applications—without it the applications are just empty husks. Books with covers but no pages. Application data stored in the database, especially user information, is a prime target for attackers. They want the passwords and personal information to log into accounts on other sites. They desire financial and credit card information to empty user bank accounts. ...