Skip to content

Glossary: Endpoint, Application and Email Security

SQL injection

An attack where SQL typed into a form field becomes part of the database command, such as 97214' OR '1'='1. Parameterized queries are the main fix.

Where the book teaches it

Related terms

parameterized queryinput validationBandit