Okuzeka
Databases & SQL vocabulary · Administration and Security

SQL injection

Meaning in databases & SQL, with examples

nounCore term

In databases & SQL, SQL injection means: An attack in which someone puts SQL code into an input field so that the application runs it, letting the attacker read, change or delete data.

In Turkish: SQL enjeksiyonu, SQL injection

How it is used

It happens when code builds queries by joining strings with user input. The standard defence is parameterized queries (prepared statements), never string concatenation, plus least privilege for the app's database user. It appears in every security checklist and many interviews.

Example sentences

  1. This search form is open to SQL injection because it concatenates the input into the query.

  2. Use parameterized queries everywhere to prevent SQL injection.

Common collocations

  • prevent SQL injection
  • SQL injection attack
  • vulnerable to SQL injection
  • parameterized query
  • prepared statement
  • privilegeA permission that allows a database user or role to do a specific action, such as reading a table, inserting rows or creating new objects.
  • queryA request sent to a database to read or change data, usually written in SQL. As a verb, to query means to ask a database for data.
  • ORMObject-relational mapping: a library that lets developers work with database rows as objects in their programming language and generates the SQL for them.
  • roleA named set of database privileges that can be given to many users at once, such as read_only or app_writer, to make permission management simpler.

This word in other fields

The same English word can have a different meaning in another field:

More terms: Administration and Security

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: