We don't just build sites. We built the platform they run on.

/**
 * Apply scoping + soft-deletion filter to any
 * query. Centralizing this prevents forgetting
 * to add "WHERE user_id = ?" to the request.
 */
final class ContentFilter
{
    public function __construct(
        private readonly PDO $db,
        private readonly UserContext $ctx,
    ) {}

    public function scope(string $table, array $where = []): array
    {
        $conds  = ["{$table}.user_id = :uid", "{$table}.deleted_at IS NULL"];
        $params = [':uid' => $this->ctx->userId()];

        foreach ($where as $col => $val) {
            $ph          = ':' . str_replace('.', '_', $col);
            $conds[]     = "{$col} = {$ph}";
            $params[$ph] = $val;
        }
        return [implode(' AND ', $conds), $params];
    }

    public function all(string $table, array $where = []): array
    {
        [$sql, $params] = $this->scope($table, $where);
        $stmt = $this->db->prepare("SELECT * FROM {$table} WHERE {$sql} ORDER BY id DESC");
        $stmt->execute($params);
        return $stmt->fetchAll(PDO::FETCH_ASSOC);
    }
}