1 article with this tag
SQLi is when input is read as 'part of the command' rather than data, changing a query's meaning and leading directly to read/alter/delete. The main defense is to stop string-concatenating SQL and pass values via placeholders (prepared statements).