Question discussion

Which of the following is the most effective programming-level defence against SQL injection?

1934Medium DSSSB TGT Computer Science 0 replies 1 views
0

Which of the following is the most effective programming-level defence against SQL injection?

  • AHiding the name of the database
  • BUsing parameterised (prepared) statements
  • CUsing longer table names
  • DServing the web page over HTTPS
Correct answer: B

Explanation

Parameterised queries keep user input as data and never as SQL code; HTTPS only protects data in transit.

Discussion 0

Nobody has replied yet. Start the discussion!