You built it with AI.
We make it bulletproof.

// TODO: add auth later lol
const user = req.body.user
const query = `SELECT * FROM users WHERE id = ${user.id}`
// SQL injection vulnerability ^
const result = await db.query(query)
res.json(result) // No error handling

const userId = validateUUID(req.params.id)
if (!isAuthenticated(req)) {
  throw new UnauthorizedError()
}
// Parameterized query, proper auth
const user = await db.findUnique({ id: userId })
res.json({ data: sanitize(user) })