Glossary · Security+

SQL injection

An attack that inserts malicious SQL code into an input field to manipulate or extract data from a backend database — mitigated primarily through input validation and parameterized queries.