Oracle
1Z0-146 · Question #61
View the Exhibit. How do you reduce the chances of SQL injection for the procedure?
The correct answer is D. Convert the SELECT statement to static SQL, placing the value of P_EMAIL into a local variable. See the full explanation below for the reasoning.
Question
View the Exhibit. How do you reduce the chances of SQL injection for the procedure?
Exhibit
Options
- AExecute the SQL statement in V_STMT as dynamic SQL.
- BRemove the default value for the arguments in the procedure.
- CConvert the condition in the WHERE clause to be accepted from the user and concatenated.
- DConvert the SELECT statement to static SQL, placing the value of P_EMAIL into a local variable.
How the community answered
(22 responses)- B14% (3)
- C9% (2)
- D77% (17)
Community Discussion
No community discussion yet for this question.
