medium
Single Answer
0

Parvati wants to configure her web application firewall to prevent basic SQL injection attacks. Which of the following rules could she use to accomplish this?

Answer Options

A

Filter out all OR statements.

B

Filter out single quotes.

C

Block all SQL statements.

D

Block all AND statements.

Correct Answer: B

Explanation

While blocking single quotes won’t stop all SQL injection, it will stop many basic injection attacks. Preventing the use of SQL or AND and OR statements may break some applications, although secure web applications should be using stored queries.