SQL Injection
A code injection technique where malicious SQL statements are inserted into entry fields for execution.
Definition
A code injection technique where malicious SQL statements are inserted into entry fields for execution.
Use case
Using parameterized ORM queries (WHERE id = ?) to stop attackers from injecting OR 1=1 commands.
Related terms
Articles
SQL injection
Smuggling database commands through input fields, and parameterized queries.