LearnFrenzy

Sign in Take a free test

Glossary · Cybersecurity

What is SQL Injection?

An attack where input changes the meaning of a database query because it was inserted directly into the SQL text.

In more detail

Can expose or alter data. Prevented reliably with parameterised queries or a safe ORM, plus least-privilege database accounts.

Example

Typing ' OR '1'='1 into a login form built with string concatenation.

Learn it properlyOWASP Top 10 for Beginners: SQL Injection, XSS and Broken Access Control14 min lesson · Cybersecurity

Related terms

CIA TriadThe three core goals of information security: confidentiality, integrity and availability.Cross-Site Scripting (XSS)An attack where untrusted input is shown on a page without encoding, so an attacker’s script runs in other users’ browsers.Multi-Factor Authentication (MFA)Logging in with two or more different kinds of proof: something you know, have or are.Password HashingStoring a one-way, salted, deliberately slow transformation of a password instead of the password itself.PhishingA fraudulent message pretending to come from a trusted source to steal credentials, money or access.Zero TrustA security model that never grants trust based on network location and verifies every user, device and request.