[aligajani]

How do you prevent SQL injections or bad queries?

[mritchie712]

we only execute SELECT statements and the user we connect with has readonly access.

On "bad queries", we rely heavily on the users past SQL history to understand correct JOIN's and how they normally define metrics / use the database in general.