Cybersecurity

SQL Injection

/es kjuː el ɪnˈdʒekʃən/

Definition

An attack where malicious SQL is inserted into a query via unsanitised user input, allowing data theft or modification.

Example in context

"Never concatenate user input into SQL — use parameterised queries or an ORM to prevent SQL injection."

Practice this term

Master SQL Injection in context by working through exercises in the Cybersecurity module. You'll see the term used in real engineering scenarios with multiple-choice, fill-in-the-blank, and matching drills.