SQL injection · Question 10 of 12
What must you additionally consider in a LIKE search with user input?
1 answer is correct. Medium
Show answer
Answer
- A Neutralise % and _ with escapeLikeWildcards()
Explanation
Even bound values can contain % and _ and thus match more than intended. escapeLikeWildcards() masks them, after which you add your own placeholders.