SQL injection is an attack in which malicious code is inserted into strings that are later passed to an ...
technet.microsoft.com