Which Drupal security practice is required by the OWASP Top 10 to prevent injection attacks in custom database queries?
-
A
Using db_query() with raw SQL strings
-
B
Using Drupal's database abstraction layer with parameterized queries
-
C
Sanitizing output with check_plain()
-
D
Enabling the Security Review module