How to query mongodb from a search form using node and express

Question

I want to make an HTML form to query MongoDB. How can I write the logic to ignore blank fields? For example, I have two search parameters. If the lastname field is blank, how would I write the query to ignore that field?

router.post('/auth/search', auth, function(req,res){
    var db = req.db;
    console.log(req.body);
    db.users.find({ 'firstname': req.body.firstname,
                    'lastname' :req.body.lastname  // if this field is blank in the form how can I ignore it?

    }, function(err, docs){
        if (err) return err;
        console.log(docs);
        res.send(docs);
    });
});

Appreciate any help. Thanks!

Ry- · Accepted Answer · 2014-07-06 17:20:00Z

6

You can add properties to your query only if they’re truthy:

var query = {};

if (req.body.firstname) {
    query.firstname = req.body.firstname;
}

if (req.body.lastname) {
    query.lastname = req.body.lastname;
}

db.users.find(query, function (err, docs) {
    // …
});

answered Jul 6, 2014 at 17:20

Ry-♦

226k56 gold badges496 silver badges504 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Harpreet Singh · Accepted Answer · 2014-07-06 17:56:10Z

-2

By making search object dynamically.

router.post('/auth/search', auth, function(req,res){
    var db = req.db;
    console.log(req.body);
    var obj = {}
    if(req.body.firstname) {
        obj['firstname'] = req.body.firstname;
    }
    if(req.body.lastname) {
        obj['lastname'] = req.body.lastname;
    }

    db.users.find(obj, function(err, docs){
        if (err) return err;
        console.log(docs);
        res.send(docs);
    });
});

edited Jul 6, 2014 at 17:56

answered Jul 6, 2014 at 17:24

Harpreet Singh

2,67123 silver badges31 bronze badges

3 Comments

Ry- Over a year ago

curl -d '$where=function () { while (true); }' says “don’t do that”.

maček Over a year ago

@HarpreetSingh, it's a matter of whitelisting/sanitizing your inputs. You don't want to openly trust any parameter that's being sent from the end user.

Harpreet Singh Over a year ago

Oh yes, sure it would be a big mistake. Though I know that but slipped from mind this time. Now it will be remembered forever. Thanks :)

Collectives™ on Stack Overflow

How to query mongodb from a search form using node and express

2 Answers 2

Comments

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related