SQL injection · Question 2 of 12
How do you pass user input safely in the TYPO3 QueryBuilder?
1 answer is correct. Easy
Show answer
Answer
- A With createNamedParameter()
Explanation
createNamedParameter() binds the value as a parameter of a prepared statement. It stays data and is never read as SQL.