Bird
0
0

Consider this code:

medium📝 query result Q5 of 15
SQL - Security Basics
Consider this code:
PREPARE stmt FROM 'SELECT * FROM orders WHERE status = ?';
SET @status = 'shipped';
EXECUTE stmt USING @status;

What will this query return?
AAll orders regardless of status
BAll orders with status 'shipped'
CAll orders with status 'pending'
DAn error because status is not a valid column
Step-by-Step Solution
Solution:
  1. Step 1: Analyze the prepared statement

    The query selects orders where status equals a parameter.
  2. Step 2: Check the parameter value

    @status is set to 'shipped', so the query returns orders with status 'shipped'.
  3. Final Answer:

    All orders with status 'shipped' -> Option B
  4. Quick Check:

    Output = C [OK]
Quick Trick: SET parameter before EXECUTE in prepared statements [OK]
Common Mistakes:
  • Mixing up status values
  • Assuming all orders returned
  • Thinking column name is invalid

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More SQL Quizzes