When do you use static SQL as a technique for avoiding SQL injection?

When do you use static SQL as a technique for avoiding SQL injection?

When do you use static SQL as a technique for avoiding SQL injection?

A.
when the WHERE clause values are unknown

B.
when the code contains data definition language (DDL) statements

C.
when all Oracle identifiers are known at the time of code compilation

D.
when the SET clause values are unknown at the time of code compilation

Show Hint

Leave a Reply 5

Your email address will not be published. Required fields are marked *

PIERO

PIERO

HY
somoeone can tell me how wh can to knov set clause values at the compilation time ?

my be didn’t unerstand the question….

thanks

Reply

PIERO

PIERO

http://www.firstsql.com/tutor4.htm

PDATE Statement

The UPDATE statement modifies columns in selected table rows. It has the following general format:
UPDATE table-1 SET set-list [WHERE predicate]
The optional WHERE Clause has the same format as in the SELECT Statement. See WHERE Clause. The WHERE clause chooses which table rows to update. If it is missing, all rows are in table-1 are updated.
The set-LIST contains assignments of new values for selected columns. See SET Clause.

The SET CLAUSE EXPRESSIONS and WHERE CLAUSE PREDICATE can contain subqueries, but the subqueries cannot reference table-1. This prevents situations where results are dependent on the order of processing.

SET Clause

The SET Clause in the UPDATE Statement updates (assigns new value to) columns in the selected table rows. It has the following general format:
SET column-1 = value-1 [, column-2 = value-2] …
column-1 and column-2 are columns in the Update table. value-1 and value-2 are expressions that can reference columns from the update table. They also can be the keyword — NULL, to set the column to null.
Since the assignment EXPRESSIONS can reference columns from the current row, the expressions are evaluated first. After the values of all Set expressions have been computed, they are then assigned to the referenced columns. This avoids results dependent on the order of processing.

Reply