<transcript><audio_71>but using the post method is certainly one of the important parts of safeguarding yourself so let's wrap up the morning session with this last quiz question everyone please press the st button and be ready so the question is</transcript><transcript><audio_72>is the following prepared statement secure connection dot prepare statement select star from instructor where name equal to quote plus name code using a prepared statement and this name comes</transcript><transcript><audio_73>from some user input so the question the options are yes it is secure no it is not yes if the table is locked and the last one is none of the above so please get ready to answer it okay time is out</transcript><transcript><audio_74>for that question remember yesterday I already had an almost equivalent question and I showed Ian I told you that prepared statements are key to avoiding SQL injection but it is not a magic mantra if I just say prepared statement that does not solve all the</transcript><transcript><audio_75>problems what is important is any user input has to be mapped to ? values in the prepared statement and then you have to use the set string or setting in those functions to set the parameter</transcript><transcript><audio_76>values with the value provided by the user and then you execute the query so that is the sequence prepared statement set the parameters execute this particular prepared statement is screwing up because it is concatenate in</transcript> but using the post method is certainly one of the important parts of safeguarding yourself so let's wrap up the morning session with this last quiz question everyone please press the st button and be ready so the question is is the following prepared statement secure connection dot prepare statement select star from instructor where name equal to quote plus name code using a prepared statement and this name comes from some user input so the question the options are yes it is secure no it is not yes if the table is locked and the last one is none of the above so please get ready to answer it okay time is out for that question remember yesterday I already had an almost equivalent question and I showed Ian I told you that prepared statements are key to avoiding SQL injection but it is not a magic mantra if I just say prepared statement that does not solve all the problems what is important is any user input has to be mapped to ? values in the prepared statement and then you have to use the set string or setting in those functions to set the parameter values with the value provided by the user and then you execute the query so that is the sequence prepared statement set the parameters execute this particular prepared statement is screwing up because it is concatenate in
{"source": "grass-yt-cc-by.0RitPJG0BgI|shard_10035_43|create_multimodal_data.extract_yt_and_generate_transcripts.56|shard_10035|create_multimodal_data.generate_captions.29|shard_10035|create_multimodal_data.generate_captions.42", "params": {"id": "0RitPJG0BgI", "channel_id": "UC3lp1Pk33sziERUwvmiNBqQ", "duration": 2528, "view_count": 249, "age_limit": 0, "chapters": [{"start_time": 0, "end_time": 35.0, "title": "<Untitled Chapter 1>"}, {"start_time": 35.0, "title": "Application Architectures", "end_time": 718.0}, {"start_time": 718.0, "title": "Object-Relational Mapping and Hibernate (Cont.) \u2022 The Hibernate object-relational mapping system is widely used public domain system, runs on a variety of database systems \u2022 supports a query language that can express complex queries", "end_time": 728.0}, {"start_time": 728.0, "title": "Web Services . Allow data on Web to be accessed using remote procedure call mechanism . Two approaches are widely used", "end_time": 2528}], "like_count": 4, "channel_follower_count": 34800, "license": "Creative Commons Attribution license (reuse allowed)", "uploader_id": "@StudioIITBombay", "yt_tar_file": "/leonardo_work/EUHPC_E03_068/audio/fixed_download/grass-yt-cc-by//shard_10035/0RitPJG0BgI.tar.gz"}}