In addition to special characters, certain keywords in log files may indicate a SQL injection attack. Which words could indicate a SQL injection attack?

'language=JavaScript' is associated with client-side scripting contexts and is not a SQL injection indicator, even though 'select' is a SQL keyword.

'<script>' is a hallmark indicator of Cross-Site Scripting (XSS), not SQL injection, regardless of the presence of the SQL keyword 'where'.

'bind' is not a recognized SQL injection keyword and is more commonly associated with LDAP injection or variable binding in programming frameworks.

The keywords 'union' and 'select' are the hallmark indicators of UNION-based SQL injection, where an attacker appends a UNION SELECT clause to an existing query in order to extract data from additional database tables. Detecting this combination in access logs is a primary detection method for SQL injection attacks.