Common Web Vulnerabilities
SQL injection concepts
SQL injection occurs when untrusted input changes the intended structure of a database query. Parameterized queries keep data separate from query structure.
typescript
// Safer pattern: parameters stay data
const user = await db.query(
'SELECT id, name FROM users WHERE email = ?',
[email]
);Defense
Use parameterized queries or a safe query builder/ORM. Do not build SQL by concatenating user input.
Lesson complete?Use the next lesson to continue the learning path.