What is a SQL injection attack?
SQL refers to the layer of databases underlying most websites. SQL attacks involves an unauthorized party injecting coding into one of these databases — coding that should not be there. An intruder can can do this by typing coding into the browser URL address line, or into any box of any webform, such as those found on account logon pages or shopping carts.