39. SQL injection

DBMS Published 30 Sept 2026 Updated 16 Oct 2026 2 Views Verified

What is the primary defense against SQL injection in application code?

Looking for the latest Sarkari Result 2026 updates? Check the latest government exam results, merit lists and result updates on Sarkari Resultess.

Answer & Explanation

4 Answers

Verified Correct Answer

Option A

Use parameterized/prepared statements and avoid constructing SQL by concatenating untrusted input.

Additional Explanation

Correct implementation. Prefer parameterized queries in application code, validate affected rows for UPDATE/DELETE, and use transactions for related writes.

Verified

Option B

Give every user DBA privileges.

Additional Explanation

This option is incorrect for the stated requirement.

Verified

Option C

Escape only the SELECT keyword.

Additional Explanation

This option is incorrect for the stated requirement.

Verified

Option D

Disable all indexes.

Additional Explanation

This option is incorrect for the stated requirement.