SQL injection · Question 8 of 12

Why should SQL error messages not appear on the live site?

1 answer is correct. Easy

Show answer

Answer

  • D They reveal tables and queries

Explanation

Error details help build an injection, for example to determine the number of columns. In production they belong in the log.

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications