CommentJun 30, 2022
dbQuery := " SELECT users.user_id, users.user, users.first_name, users.last_name, tweets.tweet, tweets.date_tweet FROM users INNER JOIN tweets ON users.user_id = tweets.user_id INNER JOIN followers ON users.user_id = followers.id_user WHERE followers.id_follower = ? ORDER BY tweets.date_tweet DESC ;" rows, err := database.DB.Query(dbQuery, c.Params("id")) You can avoid SQL injection by this simple change. Use a placeholder ( ? ) for the argument in the query and pass the argument in the db.Query method.