SQL Injection & Prepared Statements

Problem

A security auditor just demonstrated how they could drop your entire database by entering '); DROP TABLE users; -- into the login form. They mandate that you stop concatenating strings and use parameterized queries. Write a query that outputs a column prevention with the value: "Prepared statements prevent SQL injection by separating the query structure from the data parameters."

Database Schema

This problem acts as a scratchpad. You will write your own DDL/DML or conceptual queries, so there is no predefined schema.

Try It

Hint

Solution