Glossary term
What is NoSQL injection? Meaning for developers
An attacker sends an object with an operator like $ne where you expected a plain string, which changes what the query matches.
Learn it properly · Security for DevelopersLesson 1: Injection: SQL Injection, Command Injection and How to Stop ThemA real SQL injection on a tiny login, then the fix with parameterised queries. Also command injection, NoSQL injection and the rule behind all of them: never mix data into code.