Query is not executed inside of a loop function nodejs MySQL-CodePudding

I am a beginner in NodeJs and I'm trying to run a SQL query inside of a while, but it is not executing the query. I have a function in which I have an array of data from the database, if I got results, I'll save them in 2 arrays, then I declared an auxiliar variable for the while loop. Inside of the while I have to select all the members that have the reference_id in one of the arrays. If I get data, I have to save the data in the 2 arrays again and repeat the operation until there is no data from the database. The problem is that the query and all the operations that are inside of the query are not working and I don't know why.

everything inside of the loop is being executed just the query is the one that is not being executed.

   const membersPiramid2 = (request, response) => {
 let member_id = request.params.member_id;
 let members_ids = [];
 let members = [];
 let aux = true;

 db.query(`SELECT member_id FROM structures WHERE reference_id = '${member_id}'`, (error, results) => {
 if (error) throw error;

 if (results.length > 0) {
   members_ids = results.map(r => r.member_id);
   members.push(results);
  
   while (aux) {
    db.query(`SELECT member_id FROM structures WHERE reference_id IN ('${members_ids}')`, (err, newMembers) => {
      if (err) throw err;

      if (newMembers.length > 0) {
        members.push(newMembers);
        members_ids.length = 0
        members_ids = newMembers.map(m => m.member_id)

      } else {
        aux = false
      }
    })
  }
}
response.send(members);

I tried using promises and async functions but if I use any loop it is still not working

function submembersPiramid(members_ids) {
  return new Promise((resolve, reject) => {
    db.query(`SELECT member_id FROM structures WHERE reference_id IN ('${members_ids}')`, (err, newMembers) => {
    console.log('hola2')
    if (newMembers.length > 0) {
     resolve(newMembers)
    } else {
     reject('No data found')
    }
   })
})
}




 const membersPiramid = (request, response) => {
  let member_id = request.params.member_id;
  let members_ids = [];
  let members = [];
  let aux = true;

  db.query(`SELECT member_id FROM structures WHERE reference_id = '${member_id}'`, (error, results) => {
  if (error) throw error;

  if (results.length > 0) {
    members_ids = results.map(r => r.member_id);
    members.push(results);
  
    async function doFunction() {
      await submembersPiramid(members_ids).then(response => {
        if (response != 'No data found') {
          members.push(response);
          members_ids.length = 0;
          members_ids = response.map(r => r.member_id)
        } else {
          aux = false;
        }
      }).then()
    }
    while(aux){

      doFunction()
    }


  }
  response.send(members);
})
}

Any idea why the query does not work in any loop?

Here is the query result enter image description here

CodePudding user response：

instead of two queries , you can do it all in one alone

db.query(`SELECT member_id FROM structures WHERE reference_id IN (SELECT member_id FROM structures WHERE reference_id = '${member_id}')`
 , (err, newMembers) => {
  if (err) throw err;

  if (newMembers.length > 0) {
    members.push(newMembers);
    members_ids.length = 0
    members_ids = newMembers.map(m => m.member_id)

  } else {
    aux = false
  }
})

in case you really want to use nested queries, which in rare occasions it is necessary, you should see the solutions here where the asyncron communicaion is mandatory Nested query in node js using mysql

and when we are at it, you colud always look also this about sql injection up Preventing SQL injection in Node.js

CodePudding user response：

Something like this is likely to be simpler and many times more efficient:

SELECT p.member_id as parent_member_id, c.member_id as child_member_id
FROM structures p
INNER JOIN structures c on c.reference_id = p.member_id
WHERE p.reference_id = '${member_id}'

While we're here, this looks like it would be crazy-vulnerable to sql injection. Sql injection is big deal, so take a few moments to make sure you understand what sql injection is and your platform's mechanism to use prepared statements/parameterized queries.