SQL Injection. The placement of malicious code in SQL statements via web page input. SQL injection is a code injection technique that might destroy an organisation's database.