What is SQLi - SQL Injection?

SQLi is a type of application exploit called a code injection technique, in which an attacker adds malicious Structured Query Language (SQL) code to a web form input box to get access to resources.

This can also be used for database manipulation or to access information that was not intended for viewing including sensitive company data, user lists or private customer details. They are one of the most common forms of attack and can remain undetected for long periods.