In Mongo, `db.findOne({&quot;username&quot;:&quot;$_GET[&quot;name&quot;], &quot;password&quot;:$_GET[&quot;password&quot;]})` won&#x27;t open your database to the public.<p>While SQL is a powerful language, the article is right. Mongo query language is useful enough to easily give application developers a place to query and store data without giving them enough rope to hang themselves.