sql

Use parameterized queries with prepared statements instead of string concatenation. Parameterized queries separate SQL code from user input, preventing attackers from injecting malicious SQL commands. This is the foundational security pattern for PostgreSQL, MySQL, and SQLite environments.

Index columns used frequently in WHERE clauses, JOIN conditions, and ORDER BY statements. Proper indexing reduces query execution time by enabling the database to locate rows faster. Balance indexing against write performance, as indexes require maintenance during inserts and updates.

Use versioned migration files that track schema modifications sequentially. Each migration documents a single change—adding columns, creating tables, or modifying constraints. Versioned migrations enable reproducible deployments and rollback capability across development, staging, and production environments.

Yes. Track query execution times, slow query logs, and resource usage through database monitoring tools. Identify performance bottlenecks, unused indexes, and missing indexes. Regular query optimization maintains database responsiveness under production load.

Integrate linters and static analysis security testing (SAST) tools into your deployment pipeline to detect vulnerable patterns before code reaches production. These tools enforce parameterized queries, flag risky SQL patterns, and ensure compliance with security guidelines automatically.

Yes. The Skill covers relational database schema design including normalization, constraint definition, and performance considerations. Schema design guidance applies to PostgreSQL, MySQL, and SQLite with focus on security, maintainability, and query efficiency.