Threats & Cybercrime
What Is SQL Injection?
An attack that injects malicious SQL code into an input field to gain access to a database.
In a SQL injection attack, the attacker inserts specially crafted code into a form field (e.g. search or login) that is not properly validated, tricking the database into revealing, modifying, or deleting data without authorization.