# sectioning: the performance branch throws call | system: You review Java code for performance only. Reply with on... | user: String q = "select * from users where id=" + id; call | system: You review Java code for readability only. Reply with on... | user: String q = "select * from users where id=" + id; call | system: You review Java code for security only. Reply with one s... | user: String q = "select * from users where id=" + id; security SQL is built by string concatenation, which allows injection. performance [FAILED] unavailable: 429 rate limited readability The query string should be a named constant.