SQL Injection: A Friendly Guide to Understanding the Threat
Imagine typing your email address into a website’s login form. The application takes that value, searches its database, and finds your account. Nothing unusual so far. Now imagine entering a piece of SQL instead of an email address. What happens next depends on how the developer built the database query.