Newbie - Is this proper code design for query builder/parameterized queries

I used mysql library for my query builder. I copied it straight off the document and did something like this:router.post("/register", function(req, res){ console.log(req.body); bcrypt.hash(req.body.password, 10, function(err, hash){ if(err) return console.log(err); else{ req.body.password = hash; var sql = "INSERT INTO SCHEMA.user_authentication(first_name, last_name, email, password, age)" +"VALUES(?, ?, ? ,? ,?)" var values = [req.body.first_name,req.body.last_name, req.body.email,req.body.password,req.body.age] app.con.query(sql, values, function(err, result) { if(err) return console.log(err); console.log("1 record inserted"); }); } }); }); Just wanted to know if this is proper "code-design"; is there usually a cleaner/better way to do it?

Submitted June 28, 2017 at 09:22PM by badboyzpwns