Q
Which PHP function is used to sanitize user input to prevent SQL injection attacks?

Answer & Solution

Answer: Option C
Solution:
The mysql_real_escape_string() function is used to escape special characters in a string for use in an SQL statement. This helps prevent SQL injection attacks by escaping characters that could be used to manipulate the SQL query.
Related Questions on Average

Which PHP function is used to handle file uploads?

A). upload_file()

B). process_upload()

C). handle_upload()

D). move_uploaded_file()

What function is used to check if a file upload operation was successful in PHP?

A). file_exists()

B). is_uploaded_file()

C). move_uploaded_file()

D). file_upload_successful()

Which PHP function is used to redirect the user to another page?

A). redirect()

B). header()

C). forward()

D). location()

What is the purpose of the trim() function in PHP?

A). To remove whitespace from the beginning and end of a string.

B). To truncate a string to a specified length.

C). To convert a string to lowercase.

D). To convert a string to uppercase.

How can you prevent SQL injection attacks in PHP?

A). Use prepared statements with parameterized queries.

B). Escape user input using the htmlspecialchars() function.

C). Sanitize user input using the filter_var() function.

D). Validate user input using regular expressions.

Which attribute of the HTML <form> element specifies the HTTP method to be used when submitting the form data?

A). method

B). action

C). type

D). enctype

What is the purpose of the htmlspecialchars() function in PHP?

A). To convert HTML entities to their corresponding characters.

B). To remove HTML tags from a string.

C). To encode special characters in HTML format.

D). To decode special characters in HTML format.

What is the purpose of the isset() function in PHP when handling form submissions?

A). To check if a variable is empty

B). To check if a variable is set and is not NULL

C). To check if a variable is numeric

D). To convert a variable to a string

What is the purpose of the isset() function in PHP when handling form submissions?

A). To check if a variable is empty

B). To check if a variable is set and is not NULL

C). To check if a variable is numeric

D). To convert a variable to a string

What type of attribute is used in an HTML form to specify where to send the form data?

A). method

B). action

C). type

D). name