What is the defining mechanism of Structured Query Language (SQL) injection?

### Why this is right Injection occurs when application input is interpreted as part of a database command rather than only as data. The altered query can then perform an action the application developer did not intend. ### The concept A database-backed application often constructs a query using values supplied by a user. If those values are inserted unsafely, special input can alter the query's logic. Parameterized queries prevent this by separating instructions from values. ### The other options - **B. A database automatically encrypts stored information**: encryption concerns protecting data confidentiality, not changing query structure. - **C. A firewall prevents every request from reaching an application**: firewalls filter traffic, but do not define SQL injection. - **D. A user downloads a database backup through an approved interface**: this is an authorized data operation, not injection by itself. ### Terms - **SQL**: Structured Query Language, used to interact with relational databases. - **Untrusted input**: data supplied by a source that the application cannot assume is safe. ### Remember Injection happens when input is treated as command syntax.