Question: Which ActiveRecord query prevents SQL injection?

  1. `Product.where("name = #{@keyword}")`
  2. `Product.where("name = " << @keyword}`
  3. `Product.where("name = ?", @keyword`
  4. `Product.where("name = " + h(@keyword)`

Answer: The correct answer of the above question is Option C:`Product.where("name = ?", @keyword`