Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up

Which is the strongest defence against SQL injection in PHP?

  1. A mysqli_real_escape_string on every value
  2. B Prepared statements with bound parameters
  3. C Removing quotes from input
  4. D Limiting input length
Answer

Prepared statements with bound parameters

Prepared statements send the query structure separately from values, so input can never be parsed as SQL. Escaping is fragile by comparison.

All Php MCQs

Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up as