Skip to content

Glossary: PostgreSQL for Developers

SQL injection

A security hole where an attacker's text pasted into a query (for example with an f-string) becomes part of the SQL. Passing values as parameters prevents it.

Where the book teaches it

Related terms

placeholderf-string