Glossary term
What is SQL injection? Meaning for developers
User input is joined into a SQL query, so the database reads the input as SQL. Fix it with parameterised queries.
Learn it properly · Security for DevelopersLesson 1: Injection: SQL Injection, Command Injection and How to Stop ThemA real SQL injection on a tiny login, then the fix with parameterised queries. Also command injection, NoSQL injection and the rule behind all of them: never mix data into code.