SQL & SQL injections Flashcards

Used to retrieve data from a database. Example: SELECT * FROM table_name WHERE condition.

Specifies the table to retrieve data from in a query. Example: SELECT * FROM table_name.

Filters data based on a condition in a query. Example: SELECT * FROM table_name WHERE condition.

Used to select all columns in a table. Example: SELECT * FROM table_name.

A form of attack where malicious SQL code is inserted into a query to manipulate or access a database.

Occurs when user input is not properly validated, allowing malicious SQL code to be executed in a database query.

Use input validation, parameterised queries, and prepared statements to ensure user input cannot alter SQL commands.