literal-sql-statement-injection

What Is Literal SQL Statement Injection, and How Do You Stop It?

Literal SQL statement injection happens when user input is concatenated straight into a query string. Here is how the attack works and how to shut it down.