Glossary: Endpoint, Application and Email Security

parameterized query

Also written: prepared statement

A database query that sends the SQL and the values separately, with ? as a placeholder, so input is always treated as data and never as code. It is the best defense against SQL injection.