I hope you don&#x27;t try and write a post with a singe quote in it!<p>(You&#x27;re directly interpolating the post content into a SQL query, rather than using parameterization. Similarly, you&#x27;ve got an injection vulnerability in your get, someone could infect arbitrary SQL into the post id.)