SQL injection is a code injection technique, to attack web applications with malicious SQL statements that are inserted through form fields and they usually pullĀ .