Oops! This image does not follow our content guidelines. To continue publishing, please remove it or upload a different image.
SQL injection is a technique for exploiting vulnerabilities at the database layer of an application. This cybercrime threat can occur because of input that is not filtered properly in its manufacture, so that loopholes are created that can be abused.
SQL injection is done by modifying the SQL command on the application input form, so that the perpetrator can send the syntax to the application database.
That way, hackers can see data they shouldn't see including data belonging to other users, or other data that the app itself has access to. In some cases, the perpetrator may modify or delete the data so that it can cause changes to the content or application.