fix: update comments with correct DB variable

Author: leftrightleft

models/models.go

@@ -34,7 +34,7 @@ func AllBooks() ([]Book, error) {
 // The user input is not parameterized. Instead of using fmt.Sprintf() to build
 // the query, you should be using a parameterized query.
 func NameQuery(r string) ([]Book, error) {
-	// Fix: rows, err := db.Query("SELECT * FROM books WHERE name = ?", r)
+	// Fix: rows, err := DB.Query("SELECT * FROM books WHERE name = ?", r)
 	rows, err := DB.Query(fmt.Sprintf("SELECT * FROM books WHERE name = '%s'", r))
 	if err != nil {
 		return nil, err
@@ -53,7 +53,7 @@ func NameQuery(r string) ([]Book, error) {
 // The user input is not parameterized. Instead of using fmt.Sprintf() to build
 // the query, you should be using a parameterized query.
 func AuthorQuery(r string) ([]Book, error) {
-	// Fix: rows, err := db.Query("SELECT * FROM books WHERE author = ?", r)
+	// Fix: rows, err := DB.Query("SELECT * FROM books WHERE author = ?", r)
 	rows, err := DB.Query(fmt.Sprintf("SELECT * FROM books WHERE author = '%s'", r))
 	if err != nil {
 		return nil, err
@@ -72,7 +72,7 @@ func AuthorQuery(r string) ([]Book, error) {
 // The user input is not parameterized. Instead of using fmt.Sprintf() to build
 // the query, you should be using a parameterized query.
 func ReadQuery(r string) ([]Book, error) {
-	// Fix: rows, err := db.Query("SELECT * FROM books WHERE read = ?", r)
+	// Fix: rows, err := DB.Query("SELECT * FROM books WHERE read = ?", r)
 	rows, err := DB.Query(fmt.Sprintf("SELECT * FROM books WHERE read = '%s'", r))
 	if err != nil {
 		return nil, err