Node.js连接现有MySQL数据库：无需定义模型直接查询可行吗？

Absolutely! You don’t need to define models for this simple use case. Since you already have a database connection set up, you can directly execute your parameterized SQL query and return the results as JSON. This is a lightweight, straightforward approach perfect for a single-endpoint API.

Here’s a practical example using Express (a common Node.js web framework) and mysql2 (which supports async/await for cleaner code):

const express = require('express');
const db = require('./your-db-connection-file'); // Your existing DB connection instance
const app = express();
app.use(express.json()); // Parse JSON request bodies if using POST

// Example: GET endpoint with query parameters
app.get('/fetch-data', async (req, res) => {
  try {
    // Extract and validate incoming parameters
    const numericValue = parseInt(req.query.number);
    const dateTimeValue = req.query.datetime;

    // Basic validation to avoid invalid queries
    if (isNaN(numericValue) || !dateTimeValue) {
      return res.status(400).json({ error: 'Invalid parameters: provide a valid number and datetime' });
    }

    // Parameterized query to prevent SQL injection (critical!)
    const [results] = await db.execute(
      'SELECT * FROM your_target_table WHERE numeric_column = ? AND datetime_column = ?',
      [numericValue, dateTimeValue]
    );

    // Return query results as JSON
    res.json(results);
  } catch (err) {
    console.error('Database query failed:', err);
    res.status(500).json({ error: 'Failed to retrieve data from database' });
  }
});

// Alternative: POST endpoint with request body
app.post('/fetch-data', async (req, res) => {
  try {
    const { number, datetime } = req.body;
    const numericValue = parseInt(number);

    if (isNaN(numericValue) || !datetime) {
      return res.status(400).json({ error: 'Invalid parameters: provide a valid number and datetime' });
    }

    const [results] = await db.execute(
      'SELECT * FROM your_target_table WHERE numeric_column = ? AND datetime_column = ?',
      [numericValue, datetime]
    );

    res.json(results);
  } catch (err) {
    console.error('Database query failed:', err);
    res.status(500).json({ error: 'Failed to retrieve data from database' });
  }
});

app.listen(3000, () => console.log('API running on port 3000'));

Key Things to Keep in Mind: #

• Never skip parameterized queries: Using ? placeholders (instead of string concatenation) protects your API from SQL injection attacks—this is non-negotiable for user input.
• Validate inputs upfront: Quick checks ensure you don’t send invalid requests to the database and give clear feedback to the API consumer.
• Handle errors gracefully: Catching exceptions prevents your server from crashing and returns meaningful error messages instead of generic server errors.
• Models are optional here: Models (like those from ORMs such as Sequelize or Prisma) add value when your API grows to multiple endpoints, needs complex data transformations, or requires schema enforcement. For your single-query use case, they’d just add unnecessary overhead.

内容的提问来源于stack exchange，提问作者Kulbuto