Skip to content

Glossary: Endpoint and Application Security

SQL injection

An attack in which input is treated as database code, such as x' UNION SELECT password FROM users--. Validation and parameterized queries stop it.

Where the book teaches it

Related terms

parameterized queryInput validationXSS (cross-site scripting)