Which of the following is NOT a recommendation to prevent SQL injection attacks?

Use parameterized queries in ASP.Net and prepared statements in Java to perform escaping of dangerous characters before the SQL statement is passed on to the database

Use of backlisting or whitelisting of special characters

Use proper input validation

Use strong authentication