BlackFriday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

XML Exam I10-003 Topic 9 Question 39 Discussion

Actual exam question for XML's I10-003 exam
Question #: 39
Topic #: 9
[All I10-003 Questions]

See separate window.

A certain Web application displays user information according to user input via Web browser. The XML data managing user information is as shown in [example.xml] (separate window). The following [XQuery] is executed when the Web application retrieves user information from [example xml].

[XQuery]

{

fn:doc("example.xml")//data[userid = "(1)"][password = "(2)"]

}

At this time, the Web application completes the [XQuery] by replacing (1) and (2) with the user input character string, and executes the query.

No character escapes (e.g. convert "<" to "<") are performed for character string input by the user. Select two of the following that produces the query execution result in [Execution Result] (separate window) when the character string is as shown in each answer choice.

Show Suggested Answer Hide Answer
Suggested Answer: B, F

Contribute your Thoughts:

Rosalind
5 months ago
Yes, those inputs can manipulate the query without character escapes.
upvoted 0 times
...
Alex
6 months ago
Maybe also (1) idorfn:true() and (2) OK? It seems logical.
upvoted 0 times
...
Iluminada
6 months ago
Right. Inputs like (1) ' or ''=' and (2) OK could cause unexpected behaviors.
upvoted 0 times
...
Ardella
6 months ago
I think it may have something to do with SQL injection-like inputs.
upvoted 0 times
...
Samira
6 months ago
Yeah, the XQuery stuff can be confusing.
upvoted 0 times
...
Geoffrey
7 months ago
This question is tricky!
upvoted 0 times
...

Save Cancel