Okuzeka
Software Engineering vocabulary · APIs, Networking and Security

SQL injection

Meaning in software engineering, with examples

nounCommon term

In software engineering, SQL injection means: An attack in which someone types SQL code into a form or URL so that the database runs it, which can expose or delete data.

In Turkish: SQL enjeksiyonu, SQL injection

How it is used

Happens when user input is pasted directly into a query string. It is prevented with parameterized queries (prepared statements) or an ORM. SQL is said letter by letter or as 'sequel'.

Example sentences

  1. This login form is vulnerable to SQL injection because it builds the query by joining strings.

  2. Parameterized queries protect us from SQL injection.

Common collocations

  • SQL injection attack
  • vulnerable to SQL injection
  • parameterized query
  • prepared statement
  • databaseAn organized store of data, such as users, orders or posts, that a back end can save to, search and update quickly.
  • cross-site scriptingAn attack in which someone gets harmful JavaScript into a page that other users open, for example through a comment, so that the script runs in their browsers.
  • back endThe server side of a website or app that users do not see: it stores data, runs business logic and sends the front end what it needs.
  • formA part of a page where users enter information, such as a login, search or contact form, which is then sent to a server.

This word in other fields

The same English word can have a different meaning in another field:

More terms: APIs, Networking and Security

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: