Bird
0
0

You want to safely insert multiple user records into a database using Flask and prevent SQL injection. Which approach correctly combines parameterized queries with batch insertion?

hard📝 Application Q15 of 15
Flask - Security Best Practices
You want to safely insert multiple user records into a database using Flask and prevent SQL injection. Which approach correctly combines parameterized queries with batch insertion? 
users = [("alice", 25), ("bob", 30)]
cursor.executemany(??? , users)
What should replace ????
A"INSERT INTO users (name, age) VALUES (%s, %s)"
B"INSERT INTO users (name, age) VALUES ('%s', '%s')"
C"INSERT INTO users (name, age) VALUES (?, ?)"
D"INSERT INTO users (name, age) VALUES (:name, :age)"
Step-by-Step Solution
Solution:

  1. Step 1: Identify correct placeholder syntax for batch insert

    For executemany with psycopg2 or similar, %s placeholders are used without quotes.

  2. Step 2: Check placeholder usage in options

    "INSERT INTO users (name, age) VALUES (%s, %s)" uses %s placeholders correctly; "INSERT INTO users (name, age) VALUES ('%s', '%s')" wrongly adds quotes, "INSERT INTO users (name, age) VALUES (?, ?)" uses ? (SQLite style), "INSERT INTO users (name, age) VALUES (:name, :age)" uses named placeholders which need dicts.

  3. Final Answer:

    "INSERT INTO users (name, age) VALUES (%s, %s)" -> Option A

  4. Quick Check:

    Use %s placeholders without quotes for executemany [OK]
Quick Trick: Use %s placeholders without quotes for batch inserts [OK]
Common Mistakes:
MISTAKES
  • Adding quotes around %s placeholders
  • Using ? placeholders with psycopg2
  • Using named placeholders without dict parameters

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Flask Quizzes
Deployment - Logging in production - Quiz 3easy Deployment - Logging in production - Quiz 2easy Flask Ecosystem and Patterns - Flask vs Django decision - Quiz 2easy Flask Ecosystem and Patterns - Migrating to async Flask - Quiz 9hard Flask Ecosystem and Patterns - Command pattern with Flask CLI - Quiz 7medium Middleware and Extensions - Why middleware extends functionality - Quiz 9hard Middleware and Extensions - Before_request as middleware alternative - Quiz 3easy Performance Optimization - Profiling Flask applications - Quiz 13medium Security Best Practices - Password storage best practices - Quiz 1easy Testing Flask Applications - Testing with database - Quiz 5medium