Verified70% confidenceFactExact time
The principle of SQL injection is that an attacker inserts malicious SQL statement fragments into user input fields; when the backend directly concatenates user input into database query statements, it is executed by the database engine, leading to data leakage, authentication bypass, or even database write operations.
4
Sources
70%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPrompt injection is a class of attack specifically targeting large language models, analogous to SQL injection in traditional web security.76% similarUnverified提示注入与SQL注入漏洞存在结构类比：后者利用数据库无法区分SQL代码与数据字符串，前者利用LLM无法区分元指令与被处理内容76% similarVerifiedSQL is a classic example of a declarative language, where users declare what data they want and the database query optimizer decides the optimal execution plan on its own.69% similarUnverifiedDuring migration, SQL queries must be rewritten into MongoDB's Aggregation Pipeline syntax, and database-side logic such as stored procedures and triggers often needs to be moved to the application layer.69% similarUnverifiedSupabase client built-in methods rather than string-concatenated SQL should be used to prevent SQL injection.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/907420API
curl https://kongchang.com/api/v1/knowledge/claims/907420MCP
get_claim(id=907420)