Glossary: Application and Credential Attacks, and AI Risks

parameterized query

Also written: parameterized queries, placeholder

A database query where the input goes into a placeholder (?) that the database fills as data only. Quote marks in the input stay plain characters, which stops SQL injection.