NEW QUESTION: 2
A. Option A
B. Option C
C. Option D
D. Option B
Answer:A
NEW QUESTION: 2
A. Option A B. Option C C. Option D D. Option B
Explanation: With most development platforms, parameterized statements that work with parameters can be used (sometimes called placeholders or bind variables) instead of embedding user input in the statement. A placeholder can only store a value of the given type and not an arbitrary SQL fragment. Hence the SQL injection would simply be treated as a strange (and probably invalid) parameter value.