Which one of the following explains how prepared statements prevent SQL injection?

Group of answer choices

By using placeholders and bind parameters to separate user input from the SQL code.

By parsing and analyzing user input to detect and block malicious SQL code.

By encoding user input before integrating it into SQL queries.

By only running queries from a set of safe predefined queries.