1551. Prevent SQL injection — E-commerce — implementation variant 1

DBMS Published 30 Sept 2026 Updated 30 Sept 2026 0 Views Verified

In a E-commerce application, implement this production problem: Fetch a customer by email without concatenating user input into SQL. The API/service receives user input and must return or modify data safely. Give the SQL solution, explain why it works, and show how the same operation is called from the selected stack.

Looking for the latest Sarkari Result 2026 updates? Check the latest government exam results, merit lists and result updates on Sarkari Resultess.

Answer & Explanation

4 Answers

Verified Correct Answer

Option A

SELECT id,name,email FROM customers WHERE email=:email;

Additional Explanation

Use parameter binding/prepared statements. Never concatenate untrusted values into SQL.

Verified

Option B

DELETE FROM the_table;

Additional Explanation

Incorrect: it does not implement the stated business rule and may modify/fetch the wrong rows.

Verified

Option C

UPDATE the_table SET status='active';

Additional Explanation

Incorrect: it does not implement the stated business rule and may modify/fetch the wrong rows.

Verified

Option D

SELECT * FROM the_table;

Additional Explanation

Incorrect: it does not implement the stated business rule and may modify/fetch the wrong rows.