How can injection vulnerabilities (like SQL injection) be prevented?
Using weak passwords
Building SQL queries through string concatenation
Using parameterized queries or prepared statements and validating all inputs
Disabling firewalls
This question is part of this quiz :
OWASP Top 10 Vulnerabilities