GLOSSARY / DEFINITION

SQL injection

Input that changes the meaning of an SQL query. Parameterised queries and appropriate permissions are key defences; stripping selected characters is insufficient.

Sources and review

Reviewed:

Back to glossary