Daily Term: SQL Injection
SQL Injection
SQL Injection is a security attack where malicious SQL code is inserted into a query via user input, allowing attackers to manipulate a database. For example, if a login form doesn’t sanitize inputs, an attacker might enter ' OR '1'='1 to bypass authentication. SQL injection can lead to data theft or corruption, but it’s prevented by using prepared statements, input validation, and escaping user inputs.
Date: 2025-10-29