Question

Which ActiveRecord query prevents SQL injection?

 a. Product.where("name = #{@keyword}")

 b. Product.where("name = " << @keyword}

 c. Product.where("name = ?", @keyword

 d. Product.where("name = " + h(@keyword)

Answer 1

Which ActiveRecord query prevents SQL injection?

Correct answer is :-  Product.where("name = ?", @keyword