SAP interview question

How will you handle sql injection?