What Is SQL Injection? How It Works and How to Prevent It

Thu, 15 Oct 2026 10:00:00 -0300

You type something into a login screen's username field, but instead of a name you paste a fragment of code. The site doesn't complain: it runs it. That is, in essence, how SQL injection works — a flaw publicly described more than 25 years ago that keeps showing up in major incidents. This post explains the mechanism with an example you can follow without being a programmer, and shows what actually fixes the problem.

MOVEit: 3 years on from the zero-day that exposed 93 million records

Sun, 31 May 2026 09:00:00 -0300

Three years ago, on this exact day, Progress Software published an emergency alert for MOVEit Transfer customers: there was a critical SQL injection vulnerability being actively exploited. What nobody knew yet was the scale of the damage. When the dust settled, more than 2,700 organisations — the BBC, British Airways, the US Department of Energy, American and Canadian state governments — had been compromised. Around 93 million people had data stolen. And the group behind it all had started operating four days before public disclosure.

Sql Injection on Locodigital

What Is SQL Injection? How It Works and How to Prevent It

MOVEit: 3 years on from the zero-day that exposed 93 million records