In order to understand the SQL injection flaw, initially you need to have some knowledge of SQL. First, let's look at some basic database concepts:
- Column or field: A column or field is one particular piece of data referring to a single characteristic of all entities, such as username, address, or password.
- Row or record: A row or record is a set of information, or group of field values, related to a single entity, for example, the information related to a single user or a single client.
- Table: A table is a list of records containing information about the same type of elements, for example, a table of users, products, or blog posts.
- Database: A database is the whole set of tables associated with the same system or group of ...