Do prepared statements prevent sql injection?



Do prepared statements prevent sql injection?..

Answer / Deepak Verma

Prepared statements help reduce the risk of SQL injection attacks, but they do not completely eliminate it. It is still essential to validate and sanitize user input before using it in queries.

Is This Answer Correct ?    0 Yes 0 No

Post New Answer

More SQL PLSQL Interview Questions

how can I make a script that can be bi-language (supports english, german)? : Sql dba

1 Answers  


If i can use sys.check_constraints to display my constraints from my database using sql server 2005, how can i display then if i am using sql server 2000????

1 Answers  


Write a procedure to return the month and the number of developers joined in each month (cursor )

2 Answers   Tech Mahindra,


What is sql*loader and what is it used for?

1 Answers  


How many null values can be inserted in a coulmn whihc is unique constraint

8 Answers   Flextronics,


What are the advantages of pl sql?

1 Answers  


how to create a new table in mysql? : Sql dba

1 Answers  


Does sql use python?

1 Answers  


how to write date and time literals? : Sql dba

1 Answers  


what is index? : Sql dba

1 Answers  


What does an inner join do?

1 Answers  


Can we use ddl statements in stored procedure?

1 Answers  


Categories