SQL Injection

Introduction

SQL injection is an attempt to access a website’s database tables by injecting SQL into a form field. If a web server does not protect against SQL injection attacks, a hacker can trick the database into running the additional SQL code. By executing their own SQL code, hackers can upgrade their account access, view someone else’s private information, or make any other modifications to the database.