An attacker inserts SQL database commands into a data input field of an order form used by a web$-$based application. When submitted, these commands are executed on the remote database server, causing customer contact information from the database to be sent to the malicious user's web browser.

Which practice would have prevented this exploit?

answer

Implementing client$-$side validation

Installing antivirus, anti$-$spyware, pop$-$up blockers, and firewall software

Using the latest browser version and patch level

Implementing a script blocker