SQL Injection¶
OWASP Foundation. SQL Injection.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Equivocation
- Law and contract — a term of art ("consideration," "delivery," "reasonable") used in one sense in a precedent and another in the case at hand, or an "indemnify" clause meaning one thing to the drafter and another to the court. Software and types — a variable holding bytes in one module and items in another; SQL injection exploiting a character parsed as data in one stage and syntax in another; a unit mismatch causing a spacecraft loss.
This sourceOWASP Community. Documents SQL injection as the insertion of SQL commands into data-plane input: a character/string interpreted as data at one stage and as executable SQL syntax at another — a referent shift across a processing pipeline, mitigated by parameterized queries that keep data and syntax separate.
Supported in partVerified against the work's full text
OWASP supports the SQL-injection example (data input crossing into SQL control syntax); it says nothing about bytes/items variable confusion or a spacecraft unit mismatch.
“the attack is accomplished by placing a meta character into data input to then place SQL commands in the control plane”
- Law and contract — a term of art ("consideration," "delivery," "reasonable") used in one sense in a precedent and another in the case at hand, or an "indemnify" clause meaning one thing to the drafter and another to the court. Software and types — a variable holding bytes in one module and items in another; SQL injection exploiting a character parsed as data in one stage and syntax in another; a unit mismatch causing a spacecraft loss.
Verification¶
Does it exist? Not checked yet. This entry carries no identifier to resolve. It was extracted from the citation as written in the article, normalized, and deduplicated against the rest of the registry.
Does it back the claim? Read against the text for 1 of 1 citation: 1 supported in part. Each verdict is shown under its citation below, with what in the work backs the sentence.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:7ef6ff9d2afb · see in the full table