Query questions

SQL Injection occurs when an attacker inserts malicious SQL code into a query, which can compromise the database. Prevent SQL Injection by using parameterized queries or prepared statements, validating and escaping user input, and implementing robust input validation and sanitization practices.

To check the performance of a MySQL query, use the `EXPLAIN` statement before your SELECT query. This provides insights into how MySQL executes the query, revealing details such as which indexes are used and the estimated number of rows processed. For example, `EXPLAIN SELECT * FROM users WHERE age > 30;` gives performance metrics.

To query documents in MongoDB, use the `find()` method. The basic syntax is `db.collection.find({query})`. For example, `db.users.find({age: 30})` retrieves all users aged 30. You can also use conditions like `$gt`, `$lt`, and `$in` for advanced filtering.