{"id":43908,"library":"sql-inject-reject","title":"sql-inject-reject","description":"Express/HTTP middleware that inspects request URLs and bodies for SQL injection patterns (SQL keywords, special characters) and blocks them with a 403 response. Version 0.1.0, last updated in 2017, no recent releases. Provides four security levels (silent, typical, elevated, paranoid) with hierarchical checks. Intended as one layer of defense; not a substitute for proper query validation or parameterized queries. Minimal configuration, but very limited maintenance and community adoption.","status":"maintenance","version":"0.1.0","language":"javascript","source_language":"en","source_url":"https://github.com/Redeux/sql-inject-reject","tags":["javascript","SQL","SQL Injection","Middleware","HTTP","Server","Express","Inject","Security"],"install":[{"cmd":"npm install sql-inject-reject","lang":"bash","label":"npm"},{"cmd":"yarn add sql-inject-reject","lang":"bash","label":"yarn"},{"cmd":"pnpm add sql-inject-reject","lang":"bash","label":"pnpm"}],"dependencies":[{"reason":"Designed as Express middleware, but can be used with any Node.js HTTP server via low-level integration.","package":"express","optional":true}],"imports":[{"note":"Package is CommonJS only; no ESM or default export.","symbol":"default","correct":"const sqlInjectReject = require('sql-inject-reject');"}],"quickstart":{"code":"const express = require('express');\nconst sqlInjectReject = require('sql-inject-reject');\n\nconst app = express();\napp.use(express.json());\napp.use(sqlInjectReject({ level: 'elevated', keywords: ['UNION', 'SELECT'] }));\n\napp.post('/login', (req, res) => {\n  res.send('OK');\n});\n\napp.listen(3000, () => console.log('Server running on port 3000'));","lang":"javascript","description":"Shows how to set up the middleware with Express, configuring security level and custom keywords."},"warnings":[{"fix":"Choose level carefully and test with your application traffic.","message":"Security levels are hierarchical: paranoid includes elevated, typical, silent checks. Be aware that higher levels may cause false positives.","severity":"gotcha","affected_versions":">=0.1.0"}],"env_vars":null,"search_vec":"'0.1.0':29 '2017':33 '403':26 'adopt':72 'block':22 'bodi':12 'charact':20 'check':47 'communiti':71 'configur':65 'defens':53 'elev':43 'express':80 'express/http':5 'four':38 'hierarch':46 'http':78 'inject':3,15,76,81 'inspect':8 'intend':48 'javascript':73 'keyword':18 'last':30 'layer':51 'level':40 'limit':68 'mainten':69 'middlewar':6,77 'minim':64 'one':50 'parameter':62 'paranoid':44 'pattern':16 'proper':58 'provid':37 'queri':59,63 'recent':35 'reject':4 'releas':36 'request':9 'respons':27 'secur':39,82 'server':79 'silent':41 'special':19 'sql':2,14,17,74,75 'sql-inject-reject':1 'substitut':56 'typic':42 'updat':31 'url':10 'valid':60 'version':28","created_at":"2026-06-05T17:02:03.441986+00:00","updated_at":"2026-06-05T17:02:03.441986+00:00","problems":[{"fix":"Run 'npm install sql-inject-reject' in your project directory.","cause":"Package not installed or npm install failed.","error":"Cannot find module 'sql-inject-reject'"}],"ecosystem":"npm","meta_description":null,"install_score":null,"quickstart_score":null,"quickstart_tag":null,"pypi_latest":null,"cli_name":null,"cli_version":null,"type":"library","homepage":"https://github.com/Redeux/sql-inject-reject#readme","github":"https://github.com/Redeux/sql-inject-reject","docs":null,"changelog":null,"pypi":null,"npm":"sql-inject-reject","openapi_spec":null,"status_page":null,"smithery":null,"categories":["security"],"base_url":null,"auth_type":null,"provenance":{"verified_status":null,"verified_at":null,"last_verified":"2026-06-05","next_check":"2026-09-03","install_tag":null}}