Injection Security Risks

Overview

With an injection, users are able place code within an otherwise acceptable user

input space and have it executed when it shouldn't. The most obvious case is,

imagine someone posting a <script></script> block into an HTML form. If you

don't sanitize your inputs, that could be as bad as handing a stranger your

computer.

Most of us do not use a lot of raw SQL, in our code, but it's important to keep

all the Bobby DROP TABLES; of the world out of our executable code.