Skip to content

Select theme

Select language

Playground
- Overview
- Database
- Scale Lab
- System design
- Messaging & cache
- Operations & incidents
- Security & observability
Data platform
- PostgreSQL
  - Overview
  - Storage & indexes
    Page, heap, tuple, TOAST
    B-tree index
    Composite index
    Partial, expression, covering
    GIN, GiST, BRIN
    Why an index is not used
  - Query & planner
    Reading EXPLAIN
    Statistics and ANALYZE
    Join algorithms
    OFFSET and keyset
    Partitioning
  - Transaction & MVCC
    ACID
    MVCC
    Anomalies
    Isolation levels
    Transactions in code
    VACUUM and bloat
    XID wraparound
  - Locking
    Row-level locks
    Table-level locks
    Lock queue
    NOWAIT and SKIP LOCKED
    Optimistic vs pessimistic
    Advisory lock
    Deadlock
    Lock timeouts and monitoring
  - Operations
    Connection pooling & PgBouncer
    Replication & read replica
    Upsert: ON CONFLICT
    Misused data types
    UUID or bigint keys
    Row-level security & multi-tenancy
- Cache & Redis
Communication & distribution
- Messaging
  - Overview
  - Kafka: fundamentals
    Distributed log
    Keys and ordering
    Consumer group, rebalance
    Offset commit
  - Kafka: durability
    Replication, ISR, acks
    Idempotent producer
    Transactions, exactly-once
    Retention, compaction
  - Kafka: operations
    Consumer lag
    Retry topics and DLQ
    Share groups
  - RabbitMQ
    Exchanges and routing
    Ack, prefetch, confirms
    Dead-letter and TTL
    Queue types
  - Common patterns
    Idempotent consumer
    Transactional outbox
    Event schema evolution
- Distributed systems
- API & networking
Architecture & code
- Architecture
- Design patterns
- NestJS
- Node.js
- Engineering practices
  - Overview
  - Naming
    Overview
    Core rules
    PostgreSQL
    API, events, env
    Common mistakes
  - Clean code
    Overview
    Safe refactoring
    Functions and side effects
    Errors, comments, DRY
    Common mistakes
  - Common coding mistakes
    Overview
    Async & errors
    Numbers, dates, strings
    Database & transactions
    API & security
    Performance & resources
  - Git
    Overview
    Commits
    Branch & merge
    Recovery
    Secrets & PRs
    Common mistakes
  - Code review
    Overview
    Review priorities
    PR author
    Reviewer
    Writing comments
    Anti-patterns, metrics
    Common mistakes
  - ADRs & docs
    Overview
    What is an ADR
    Writing good ADRs
    Docs beyond ADRs
    Keeping docs alive
    Common mistakes
  - Config & 12-factor
    Overview
    12-factor & build
    Parse & validate
    Kubernetes & runtime
    Common mistakes
  - Incidents & postmortems
    Overview
    Incident response
    Hypothesis debugging
    Communication
    Postmortem
    Common mistakes
Operations & quality
Reference
- Case studies
- Glossary
  - Overview

Select theme

Select language

On this page

Overview

On this page

Overview

Tag: sql-injection Basic

This content is a draft and will not be included in production builds.

2 articles tagged sql-injection:

Common API mistakes: injection, authorization, secrets, retries
Secure coding for backends: the vulnerabilities live in the code you write