Tag: web-application-security

SQL injection exposed a fundamental web-security mistake: treating untrusted user input as executable query syntax instead of keeping code and data separate.