What is an SQI injection?

An SQL injection attack is when SQL code is entered into a user interaction box (usually a username or password) to interact with the database storing the websites user accounts. SQL injection can reveal passwords and other sensitive data being stored in a database and allow the attacker to change data stored (aka changing their password). SQL attacks are largely obsolete now due to input sanitisation not allowing any code to be submitted via a website input box.