Software development's bottleneck has quietly moved. For decades the hard problem was writing the code. Now, according to Killian Carlsen-Phelan, ...

Characters written into an input form are treated as part of a command to the database. This is the basis of SQL injection.