Tag: sql-injection

SQL injection exposed a fundamental web-security mistake: treating untrusted user input as executable query syntax instead of keeping code and data separate.