-
Database
Harden my database queries against injection
Refactors string-interpolated queries into parameterized statements and adds input validation at the boundary.
Free Prompt
Review all of my database queries for injection vulnerabilities. Refactor any string-interpolated queries into parameterized statements and add input validation at the boundary where user data enters the query. Show me each change and explain why it's safer.
What This Does / How This Helps
Hunts down queries that glue user input directly into SQL — the classic injection vector — and rewrites them as parameterized statements with validation at the boundary. Each change comes with an explanation, so you end up with a database layer attackers can't steer with crafted input.
Want to skip doing this by hand?
Fortivibe audits your app for all of the areas these prompts cover (and more).