Proactive IT Security
 

SQL Injection

SQL Injection or SQLi is a code injection technique that exploits a security vulnerability in some computer software. An injection occurs at the database level of an application (like queries). The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. Using well designed query language interpreters can prevent SQL injections.

SQL Injection Attack, abbreviated SQLIA, is a web attacking vector. SQLIA is considered one of the top 10 web application vulnerabilities of 2010 by the Open Web Application Security Project.