อธิบาย Legacy Code ให้ทีมใหม่เข้าใจเร็ว พร้อม Flag จุดเสี่ยงและ Tech Debt

You are a senior software engineer conducting a legacy code onboarding review. Your audience is a new team member who is familiar with Python but has never seen this codebase before.

Analyse the code below and produce a structured report with the following sections:

## 1. Overview (2–4 sentences)
Summarise what this code does and its role in the system.

## 2. Key Components
List the main functions, classes, or modules. For each, write one sentence explaining its responsibility.

## 3. Data Flow
Describe how data enters, transforms, and exits this code. Use a numbered step list.

## 4. Risk Flags
Identify any of the following and explain the specific risk for each:
- Silent failures / bare except / swallowed errors
- Race conditions or concurrency issues
- Hard-coded credentials, secrets, or environment-specific values
- Unbounded loops or O(n²)+ complexity hotspots
- Direct database calls in business logic (no abstraction layer)
- Missing null/boundary checks

## 5. Tech Debt Log
For each debt item, provide:
| # | Location | Issue | Suggested Fix | Effort |
|---|----------|-------|---------------|--------|
(Effort: Low / Medium / High)

## 6. Onboarding Tips
Three bullet points a new developer must know before touching this code.

Constraints:
- Be specific: reference line numbers or function names whenever possible.
- Do not rewrite the code. Explain and flag only.
- If something is ambiguous or requires runtime context to judge safely, say so explicitly rather than guessing.

```CODE TO REVIEW```
import MySQLdb
import pickle

DB_HOST = "192.168.1.100"
DB_USER = "root"
DB_PASS = "P@ssw0rd123"

def get_user_data(user_id):
    db = MySQLdb.connect(DB_HOST, DB_USER, DB_PASS, "users_db")
    cursor = db.cursor()
    cursor.execute("SELECT * FROM users WHERE id = " + str(user_id))
    rows = cursor.fetchall()
    db.close()
    return rows

def process_orders(orders):
    results = []
    for order in orders:
        try:
            data = pickle.loads(order['payload'])
            results.append(data)
        except:
            pass
    return results

def calculate_discount(items):
    total = 0
    for i in range(len(items)):
        for j in range(len(items)):
            if items[i]['category'] == items[j]['category']:
                total += items[i]['price'] * 0.1
    return total
```

You are a senior software engineer conducting a legacy code onboarding review.1 Your audience is a new team member who is familiar with {{programming_language}} but has never seen this codebase before.2

Analyse the code below and produce a structured report with the following sections:

## 1. Overview (2–4 sentences)
Summarise what this code does and its role in the system.

## 2. Key Components
List the main functions, classes, or modules. For each, write one sentence explaining its responsibility.

## 3. Data Flow
Describe how data enters, transforms, and exits this code. Use a numbered step list.

## 4. Risk Flags
Identify any of the following and explain the specific risk for each:
- Silent failures / bare except / swallowed errors
- Race conditions or concurrency issues
- Hard-coded credentials, secrets, or environment-specific values
- Unbounded loops or O(n²)+ complexity hotspots
- Direct database calls in business logic (no abstraction layer)
- Missing null/boundary checks

## 5. Tech Debt Log
For each debt item, provide:
| # | Location | Issue | Suggested Fix | Effort |
|---|----------|-------|---------------|--------|4
(Effort: Low / Medium / High)

## 6. Onboarding Tips
Three bullet points a new developer must know before touching this code.

Constraints:
- Be specific: reference line numbers or function names whenever possible.
- Do not rewrite the code. Explain and flag only.5
- If something is ambiguous or requires runtime context to judge safely, say so explicitly rather than guessing.6

```CODE TO REVIEW```
{{code}}
```