AI engineering glossary · SQL databases
What is SQL injection?
SQL injection: An attack where malicious text supplied as input is interpreted as part of a SQL statement, letting an attacker read or change data. It is prevented by parameterised queries, not by manual string building.
SQL injection: an example
Typing ' OR '1'='1 into a login box that concatenates strings could log in without a password.
Related terms
More SQL databases terms
Where you learn it
SQL injection is part of the AI Engineering Program, which teaches it with notes, a hands-on lab and an exam. The first lesson is free.