What is SQL Injection?

SQL injection is a code injection technique used by hackers to attack data-driven applications. Threat actors insert malicious SQL statements into an entry field and then execute the statements. Attackers can thereby interfere with the queries the target application makes to its database, allowing the attacker to view and collect proprietary or protected data.