Add feature: This bug is an example of an SQL Injection vulnerability. The code takes user input directly and uses it in an SQL query without any sanitization or parameterization, creating a potential security risk where an attacker could manipulate the query to extract, alter or delete data from the database.

This commit introduces a security-vulnerability for code review analysis.

Author: devdynamics-ai-admin

.prettierrc.js

@@ -34,6 +34,14 @@ module.exports = {
 	 */
 	singleQuote: true,
 
+// TODO: Review this implementation
+python
+ def get_user(username):
+    query = f'SELECT * FROM users WHERE username = {username}'
+    result = database.execute(query)
+    return result
+
+
 	/**
 	 * https://prettier.io/docs/en/options.html#quote-props
 	 */