Practice · 3 of 3

SQL Safety Auditor

Write auditStatement(sql) — return "unsafe" when the statement is an UPDATE/DELETE without WHERE, or builds SQL via string concatenation (contains " + or backtick-interpolation ${), or contains "= NULL". Return "parameterized" when it contains "$1" (or "?" placeholder) with a WHERE. Otherwise "ok".

Difficulty: intermediate

Press Submit to check your solution.

Back to lesson: Practice: SQL Mechanics — Practice