SecurityIntermediate

SQL injection

Also known as SQLi

An attack where untrusted input changes the meaning of a database command.

In the real world

Unsafe string-building can turn a search input into part of a SQL command.

Related

Go a little deeper