SQL injection happens when an application unsafely places user input into a database query. An attacker may then try to read, change, or delete data they should not access. It is one of the classic web application flaws.
Why it matters: Even a simple form can be risky if the application handles input badly.
