Which two are required to make SQL injection possible? (Choose two.)
A . The application was poorly programmed.
B . Strict security measures were followed when developing web site code.
C . User input was not sufficiently validated.
D . The webserver operating system has not been patched.
Answer: AC