Is the following code vulnerable to SQL Injection ($mysqli is an instance of the MySQLi class)? $age = $mysqli->real_escape_string($_GET['age']); $name = $mysqli->real_escape_string($_GET['name']); $query = SELECT * FROM `table` WHERE name LIKE '$name' AND age = $age"; $results = $mysqli->query($query);"

🎲 Try a Random Question  |  Total Questions in Quiz: 125  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
200-550: Zend Certified PHP Engineer Exam Practice Test 2 — practice the complete quiz, review flashcards, or try a random question.


Is the following code vulnerable to SQL Injection ($mysqli is an instance of the MySQLi class)? $age = $mysqli->real_escape_string($_GET['age']); $name = $mysqli->real_escape_string($_GET['name']); $query = SELECT * FROM `table` WHERE name LIKE '$name' AND age = $age"; $results = $mysqli->query($query);"