Ravi Sir's Cyber Security Cards › Revision Cards
Inserting Data
Inserting Data INSERT adds new rows to a table. Example: INSERT INTO students (name, city) VALUES ('Raja', 'Pune'); Every INSERT that uses user input must use prepared statements . A value like '), ('hacker','x in a joined-string INSERT can add extra rows. That is SQL injection. NULL means “unknown”
Read card text
What this card says
What it is
INSERT adds new rows to a table.
Example: INSERT INTO students (name, city) VALUES ('Raja', 'Pune');
Why it matters for security
Every INSERT that uses user input must use prepared statements.
A value like '), ('hacker','x in a joined-string INSERT can add extra rows. That is SQL injection.
Tip
NULL means “unknown”. Leave a value NULL when you truly don’t know it.
Learn more in the lesson: 10.4 Inserting Data