easy5 pts · first answer countsdatabasessqlsecurity

Building SQL from user input

Which way of running this lookup is safe from SQL injection?

// email comes from the login form
const email = req.body.email

A.db.query(`SELECT * FROM users WHERE email = '${email}'`)B.db.query('SELECT * FROM users WHERE email = $1', [email])C.db.query('SELECT * FROM users WHERE email = \'' + email + '\'')D.db.query(`SELECT * FROM users WHERE email = "${email}"`)

Discussion 0

Join free to post in the discussion.

Building SQL from user input

Discussion 0

Related questions