What is a SQL injection?

Approach: Explain malicious query interference.

A security vulnerability where an attacker can interfere with the queries that an application makes to its database by injecting malicious SQL code.

Follow-up: How do you prevent SQL injection?

Key concepts: sanitization, prepared statements.