Glossary: Endpoint and Application Security
SQL injection
An attack in which input is treated as database code, such as x' UNION SELECT password FROM users--. Validation and parameterized queries stop it.
Where the book teaches it
Related terms
parameterized queryInput validationXSS (cross-site scripting)