(多选题)??下面哪个代码是不安全的, 可能存在sql注入漏洞 ()。(2分)

【多选题】
A <select id="selectStudentByName" parameterClass="String" resultClass="Student"> select name,birth,score from tbl_student where name like '%$name$%' </select>
B stmt = connection.prepareStatement("select * from articles where uid=?"); stmt.setInt(1, id); rs = stmt.executeQuery();
C stmt = connection.prepareStatement("select * from articles where title like '%" + keyword + "%' order by id"); rs = stmt.executeQuery();
D <select id="selectStudentById" parameterClass="int" resultClass="Student"> select * from tbl_student where id=#id# </select>

查看更多