You're putting your variables inside your SQL queries (queries.js)

[bobbysebolao]

Instead of:

INSERT INTO users (name, hashed_password) VALUES ('${userName}', '${password}');

it'd be more secure to separate the username and password variables from your SQL query (it protects against script injections), like so:

      .query(
        "INSERT INTO users (name, hashed_password) VALUES ($1, $2)",
        [
          userName,
          password
        ])