A suspected SQL injection appears in a production search field. The engagement prohibits data modification. What is the best validation approach?

1. Use the least-invasive approved proof that distinguishes the suspected condition
2. Mark the issue confirmed solely because the field contains an apostrophe
3. Drop a table to establish impact conclusively
4. Extract all customer rows before seeking approval