parametrized
optimized
clean user input
insert TODO
indexes for db
add priv-folder