Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up

Which approach best prevents SQL injection in an application using MySQL?

  1. A Escaping quotes manually in every query
  2. B Using parameterised prepared statements
  3. C Restricting query length
  4. D Disabling error messages
Answer

Using parameterised prepared statements

Parameterised queries make injection structurally impossible because values never form part of the parsed SQL. Escaping is fragile and easy to apply inconsistently.

All MySQL MCQs

Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up as