NEW Create Product endpoint

[austenstone]

This pull request introduces a new feature to the application that allows users to create new products. However, the implementation of this feature introduces a potential security vulnerability. The most significant changes include the creation of a new function create in the model/products.js file and a new router endpoint in the routes/products.js file.

New feature implementation:

• model/products.js: Added a create function to insert a new product into the database. This function takes a product object as input, constructs an SQL query to insert the product into the products table, and returns the product id. This function is then added to the actions object that is exported by the module.

Potential security vulnerability:

• routes/products.js: Created a new router endpoint at /products/create that handles all HTTP methods. This endpoint extracts parameters from the request, creates a product object, and then calls the create function from db_products to insert the product into the database. However, this implementation does not sanitize or validate the input parameters, which could lead to SQL injection attacks.

[austenstone]

octodemo/vulnerable-node#23