Which option can lead to an SQL injection attack?
A. insufficient user input validation
B. running a database in debugging mode
C. using GET method instead of POST method when submitting a web form
D. using * in a SELECT statement
Which option can lead to an SQL injection attack?