An attack that injects malicious SQL to manipulate a database.
An attack that exploits inadequate input validation to make an application execute malicious SQL, leading to data theft or tampering. The most effective defense is using prepared statements, which bind user input as parameters through placeholders instead of concatenating it directly into the SQL text.
© 2026 ITBGM