Universal Container has developed a custom Visualforce page that will accept user input and must prefer returning the results to the users.
Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

Question

Universal Container has developed a custom Visualforce page that will accept user input and must prefer returning the results to the users.

Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

ALEXANDRE NGUYEN · Accepted Answer

Use bind variable in the SOQL query.

ALEXANDRE NGUYEN · Accepted Answer

Use the escapesinglequotes() method to sanitize user input.

ALEXANDRE NGUYEN · Answer

Escape double quotes in the user input.

ALEXANDRE NGUYEN · Answer

Use the with Sharing keyword on the controller.

List of questions