Your source for the most up-to-date terms, definitions, and acronyms for and about internet service providers.
Search for an ISP term
SQL injection
Last modified: Wednesday, December 03, 2003
A form of attack on a database-driven Web site in which the attacker executes unauthorized SQL commands by taking advantage of insecure code on a system connected to the Internet, bypassing the firewall. SQL injection attacks are used to steal information from a database from which the data would normally not be available and/or to gain access to an organization’s host computers through the computer that is hosting the database.
SQL injection attacks typically are easy to avoid by ensuring that a system has strong input validation.
SQL Injection Attacks - Are You Safe? An explanation of what an SQL injection attack is and how you can prevent one from occurring within your company.