Web Security / Injection
Lesson 6 of 27
What injection is
Injection happens when user input gets treated as code or commands instead of data. The fix is always the same idea: keep data and code separate.
Key points
- SQL, command and template injection
- Root cause: mixing data into code
- Fix: parameterise and escape
Quiz · +10 XP
What is the root cause of injection bugs?
Log in to save progress and earn XP.