// Direct query with unsanitized parameters
app.get('/api/users', async (req, res) => {
  const { id } = req.query;
  const result = await db.query(
    "SELECT * FROM users WHERE id = " + id
  );
  res.json(result);
});

// UNICX Typed API Controllers
import { z } from 'zod';
import { prisma } from '@/lib/db';

const userRequest = z.object({ id: z.string().uuid() });

export async function GET(req: Request) {
  // Sanitized typed schema protection
  const { id } = userRequest.parse(req.query);
  const user = await prisma.user.findUnique({ where: { id } }); // [!code highlight]
  return Response.json(user);
}