SQL injection · Question 5 of 12
How does Extbase handle values in repository queries such as $query->equals('title', $title)?
1 answer is correct. Easy
Show answer
Answer
- C It binds the values automatically as parameters
Explanation
Extbase's query language escapes values by itself. It only becomes dangerous with self-built SQL strings.