SQLi
Technology & Computing abbreviation · Cybersecurity
| Stands for | SQL injection |
|---|---|
| Categories | Technology & Computing |
SQLi stands for SQL injection, a cybersecurity abbreviation.
An attack in which input supplied to an application is interpreted as part of a database query, letting an attacker read, change or delete data, bypass logins or sometimes run commands. It happens when code builds SQL by pasting user input into query strings.
Example: The search box was vulnerable to SQLi, exposing every customer record in the database.
Usage notes
First publicly described in 1998 in Phrack magazine. Parameterized queries, also called prepared statements, are the standard defense. SQL injection was behind major breaches such as the 2008 Heartland Payment Systems hack. The xkcd comic "Exploits of a Mom", about a student named Robert'); DROP TABLE Students;--, made it famous among programmers.
Related abbreviations
More cybersecurity abbreviations
- SHA-256 – Secure Hash Algorithm 256-bit
- SIEM – Security information and event management
- SOAR – Security orchestration, automation and response
- SOC – Security operations center
- SOC 2 – System and Organization Controls 2
- SPF – Sender Policy Framework
- SSL – Secure Sockets Layer
- SSO – Single sign-on
- SSRF – Server-side request forgery
- TLS – Transport Layer Security
- Tor – The Onion Router
- TOTP – Time-based one-time password