SQL injection

An attack that slips SQL into a query built from input, such as typing `x' OR '1'='1` so every row matches. Placeholders prevent it.