🔬 Code Review

Paste a diff or a file. Get a senior-level review ranked by severity — correctness bugs, logic, security, performance — each with a concrete fix.

• Ranked by severity. Findings ordered correctness bugs > logic > security > performance > style.
• Every issue ships a fix. Each finding has a category and a concrete fix, not just a complaint.
• No invented issues. Clean code is told it's clean — no padding to look busy.

function getUser(req, res) {'{'}
  const id = req.query.id;
  const q = "SELECT * FROM users WHERE id = " + id;
  db.query(q, (e, rows) => {'{'}
    if (e) throw e;
    res.send(rows[0]);
  {'}'});
{'}'}

Fix: db.query('SELECT * FROM users WHERE id = ?', [id], cb)

Fix: pass errors to next(e); add a 404 when rows is empty.