SQL (Structured Query Language) is a programming language used to communicate with and manipulate databases. Learn its history and when to use it. ... However, it’s often found on web servers.

SQL injection is a technique where an attacker inserts malicious SQL commands into a web service input, such as a form field or a query parameter, that are executed by the database server.

SQL injection is a technique by which a hacker enters a malformed SQL statement into a Web site textbox that changes a query so that it can be used to break into a database.