Re:Explain SQL injection without technical jargon
by fragsworth on Friday December 21, 2012 @12:30AM
(#4951634)
I would disagree that SQL injection is a "highly technical subject". The linked post accurately and analogously describes what is happening by replacing the database server with a robot that can understand English. Your short explanation doesn't really give any insight into why or how the security hole happens.
Here is the explanation as requested, but (a little bit) shorter:
"An SQL injection is when user input (meaning what you would type into facebook chat, for example) gets run as computer code. So, for example, an untrusted person can reprogram facebook to do what it wants."