Bird
0
0

You want to safely query users by either username or email using parameter binding. Which query correctly uses parameter binding for both filters?

hard📝 Application Q8 of 15
SQL - Security Basics
You want to safely query users by either username or email using parameter binding. Which query correctly uses parameter binding for both filters?
ASELECT * FROM users WHERE username = :username OR email = :email
BSELECT * FROM users WHERE username = ? OR email = :email
CSELECT * FROM users WHERE username = :input OR email = :input
DSELECT * FROM users WHERE username = ?input OR email = ?input
Step-by-Step Solution
Solution:
  1. Step 1: Understand parameter binding for multiple values

    Each parameter must have a unique name or position to bind different values.
  2. Step 2: Analyze options

    SELECT * FROM users WHERE username = :username OR email = :email uses two named parameters :username and :email correctly for separate values.
  3. Final Answer:

    SELECT * FROM users WHERE username = :username OR email = :email -> Option A
  4. Quick Check:

    Unique parameters for multiple values = SELECT * FROM users WHERE username = :username OR email = :email [OK]
Quick Trick: Use distinct parameter names for different values [OK]
Common Mistakes:
  • Using same parameter name for different values
  • Using invalid syntax like ?input
  • Mixing positional and named parameters

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More SQL Quizzes