SQL Injection (SQLi)
Manipulating database queries via input fields.
Overview
SQL Injection occurs when untrusted user input is directly concatenated into a database query.
Example
SELECT * FROM users WHERE username = 'admin' --' AND password = 'password'