Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up

How does Django protect against SQL injection by default?

  1. A By escaping all output
  2. B The ORM parameterises every query
  3. C By blocking suspicious IP addresses
  4. D By validating form input only
Answer

The ORM parameterises every query

Values are always passed as query parameters. Protection is lost when using raw() or extra() with string formatting of user input.

All Django MCQs

Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up as