Coding examples are all subject to query injection

The coding examples in the README.md are not protected against query injection. There should at least be a warning, as many users will just copy these codes and potentially build insecure software.

I would welcome the an example using params and a note, explaining that failing to use params potentially allows query injection.

Start by reviewing the coding examples in README.md and identify where user-controlled query values are shown without protection. Add a warning about query injection and an example using params, then verify that the README clearly explains the safer approach and the risk of omitting it.

Written by the indexing model from the issue text.