Skip to content

Glossary: Docker Basics

SQL injection

Also written: placeholders, %s

An attack where user input pasted into SQL runs its own commands. The orders app uses `%s` placeholders so psycopg inserts values safely.

Where the book teaches it

Related terms

SQLpsycopg