What is parameter substitution in sql?



What is parameter substitution in sql?..

Answer / Gautam Das

Parameter substitution in SQL refers to replacing placeholders within SQL statements with actual values, often during the execution phase. This practice helps prevent SQL injection attacks by ensuring that user input is properly sanitized before it's inserted into a SQL statement.

Is This Answer Correct ?    0 Yes 0 No

Post New Answer

More SQL PLSQL Interview Questions

Is trigger a stored procedure?

1 Answers  


i don't want the message as 14 rows updated just it should update what it will do

4 Answers  


What is clustered, non-clustured and unique index. How many indexes can be created on a table ?

3 Answers   TCS,


Can a commit statement be executed as part of a trigger?

1 Answers  


Does truncate release storage space?

1 Answers  


Table name: T1, it has only one column. col1 ------ c b a b b b b d s a a t s Requirement: I need the following output from the above base table by using SQL query. col1 Cnt ----- ------- a 3 b 5 Others 5 Please help. Thanks Guru v.gurus@in.com

11 Answers  


What is group function in sql?

1 Answers  


What is difference between cursor and trigger?

1 Answers  


Types of backups ?

3 Answers   TCS,


What is a self join ?

6 Answers   BirlaSoft,


What is a pdo connection?

1 Answers  


Can we enter data in a table in design view?

1 Answers  


Categories