GIAC

GWAPT · Question #31

You find that a search input field allows SQL injection. Which action should you recommend?

The correct answer is A. Use parameterized queries to handle input. See the full explanation below for the reasoning.

Question

You find that a search input field allows SQL injection. Which action should you recommend?

Options

AUse parameterized queries to handle input
BRestrict search results to authenticated users
CEnable verbose error reporting
DIncrease the size of the input field

How the community answered

(26 responses)

A
73% (19)
B
4% (1)
C
15% (4)
D
8% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GWAPT Practice