Practice · 1 of 3
The Only Safe Lookup
CHALLENGE
Difficulty: intermediate+25 XP
Implement FindUser: SELECT * FROM users WHERE name = @name with the caller's string bound as a parameter — the engine REJECTS unparameterized WHERE clauses (like real engines punish injection). Returns "user:<name>" or "notfound".
``csharp
static string FindUser(CjDb db, string name);
``
Press Submit to check your solution.
Back to lesson: Practice: Data Practice: Parameters, Mapping, Transactions