Example of save queries

main.go

func getUser(username string) (User, error) {
	var userObject User

	// RISK TO SQL INJECTION EXAMPLE
	// assuming username = string values from client parameter and we have userObject with user type struct
	query := `SELECT * FROM users WHERE username = ` + username
	err := db.QueryRow(query).Scan(&userObject)
	if err != nil {
		// handle error

	}
	// continue processing...
}

func getUserSafe(username string) (User, error) {
	var userObject User
	
	// PREVENTING THE SQL INJECTION
	// Instead, use this kind of parameter (mysql)
	query := `SELECT * FROM users WHERE username = ?`
	// or if you are using postgre, use $1, $2, $3 for the parameter
	err := db.QueryRow(query, username).Scan(&userObject)
	if err != nil {
		// handle error
	}

	// continue processing
}