Use this skill when writing BoxLang database code: queryExecute, bx:query, datasource configuration, parameterized queries, transactions, stored procedures, query manipulation, or preventing SQL injection.
BoxLang provides first-class database access via JDBC. Datasources are configured
in boxlang.json or Application.bx. Queries use queryExecute() (script) or
bx:query (tag syntax) with built-in parameterization to prevent SQL injection.
boxlang.json{
"datasources": {
"mainDB": {
"driver": "mysql",
"host": "${DB_HOST:localhost}",
"port": "${DB_PORT:3306}",
"database": "${DB_NAME:myapp}",
"username": "${DB_USER}",
"password": "${DB_PASS}",
"options": {
"maximumPoolSize": 10,
"minimumIdle": 2,
"connectionTimeout": 30000
}
},
"readReplica": {
"driver": "mysql",
"host": "replica.example.com",
"port": 3306,
"database": "myapp",
"username": "${DB_READ_USER}",
"password": "${DB_READ_PASS}"
}
}
}
Application.bxclass {
// Default datasource
this.datasource = "mainDB"
// Define datasources in application scope
this.datasources = {
mainDB: {
driver : "mysql",
host : server.system.environment.DB_HOST ?: "localhost",
port : 3306,
database : "myapp",
username : server.system.environment.DB_USER,
password : server.system.environment.DB_PASS
}
}
}
queryExecute() — Script Style (Preferred)// SELECT — returns a query object
var users = queryExecute(
"SELECT id, name, email, created_at FROM users WHERE status = :status ORDER BY name",
{ status: "active" },
{ datasource: "mainDB" }
)
// Iterate results
for ( var user in users ) {
writeOutput( "#user.name# — #user.email#<br>" )
}
// Access by column name
var count = users.recordCount
var firstUser = users.name[1] // 1-indexed
// Convert to array of structs
var userArray = users.toArray()
bx:query — Tag Style