An SQL injection is a type of cyberattack that attempts to manipulate a website’s database by inserting malicious code into forms or website requests. Websites that are properly maintained, regularly updated, and built using secure coding practices are much less vulnerable to this type of attack.