Consider this method declaration: (Exhibit) A) "SET SESSION AUTHORIZATION " + user B) "SET SESSION AUTHORIZATION

Consider this method declaration:

A) “SET SESSION AUTHORIZATION ” + user
B) “SET SESSION AUTHORIZATION ” + stmt.enquoteIdentifier(user)
Is A or B the correct replacement for <EXPRESSION> and why?

A. B, because all values provided by the calling code should be enquoted.

B. A, because it is unnecessary to enclose identifiers in quotes.

C. A, because it sends exactly the value of user provided by the calling code.

D. B, because enquoting values provided by the calling code prevents SQL injection.

E. A and B are functionally equivalent.

Correct Answer: C