Use static query instead of dynamic query

Eg of dynmic query:

String query = 'select id from account where name = \'' + name + '\'';

List<Account> queryResult = Database.query(query);

Best practice is to use static query and bind variable:

List<Account> queryResult = [select id from account where name = :name];