SQL injection

In this section, we’ll cover some common ways of discovering SQL injection vulnerabilities in a web application. First, what is SQL injection? It’s when arbitrary input is used by an attacker to construct the remainder of a SQL query by the web application before executing the query on the web app’s underlying database.