Backend Queries Standards

What problem does it solve?

This Skill tackles the critical issues of inefficient, insecure, or inconsistent database queries, which can lead to performance bottlenecks, SQL injection vulnerabilities, and data integrity problems. It ensures all database interactions are robust, fast, and safe.

Core Features & Use Cases

• SQL Injection Prevention: Mandates the use of parameterized queries for all user input, eliminating a critical security risk and protecting your database from malicious attacks.
• Performance Optimization: Guides on implementing eager loading to prevent N+1 query problems, selecting only required columns, and strategically adding indexes for faster data retrieval.
• Data Consistency & Reliability: Enforces wrapping related database write operations in transactions to ensure atomicity, and recommends setting query timeouts and caching expensive queries for system stability.
• Use Case: When fetching a list of users and their associated orders, use this skill to implement eager loading to avoid N+1 queries, select only necessary columns, and ensure all user input for filtering is parameterized to prevent SQL injection.

Quick Start

Apply the Backend Queries Standards skill to refactor the 'getUserOrders' function, ensuring it uses eager loading for orders, selects only 'id', 'name', and 'email' for users, and parameterizes any user-provided filters.