SQL injection - GCSE Computer Science Definition

SQL injection is a type of cyber attack where someone tries to mess with a website’s database by entering malicious code into a text form field or URL. Imagine you’re using a form on a website to enter your username and password. If the website isn’t protected properly, a hacker could sneak malicious code into those fields instead of the normal information, tricking the website into giving away private data like personal details or passwords. This happens because the website takes the input and uses it directly in database commands without checking it first. To stop SQL injections, programmers need to make sure their websites carefully check or "validate" anything that users input to keep the data safe and secure.