Technically, how was executing SQL queries in code — did you write direct SQL queries or use a library-layer (ORM)?

In code for executing SQL queries, a library layer (ORM) or query builder is usually used to simplify database work and enhance security.

For example, in frontend projects using JavaScript/TypeScript, ORMs like Sequelize or Prisma are often employed, which allow writing queries as methods rather than SQL strings. This reduces the risk of errors and SQL injections.

However, in some cases, especially for complex or optimized queries, direct SQL queries with prepared statements are written.

Example using ORM (Sequelize):

const users = await User.findAll({ where: { status: 'active' } });

Example of a direct SQL query with preparation:

const [results] = await sequelize.query('SELECT * FROM users WHERE status = ?', {
  replacements: ['active'],
  type: sequelize.QueryTypes.SELECT
});

The choice of approach depends on performance requirements, convenience, and security.