SQL injection · Question 12 of 12

A plugin sorts by a parameter sort and builds orderBy($sort). Which measures are right?

2 answers are correct. Hard

1. A Fall back to a default column for unknown values
2. B Convert the value to a number with intval()
3. C Bind the value with createNamedParameter()
4. D Check the value against a fixed list of allowed columns