Immortalized by “Little Bobby Drop Tables” in XKCD 327, SQL injection (SQLi) was first discovered in 1998, yet continues to plague web applications across the internet. Even the OWASP Top Ten ...

Say, for instance, you want to query your entire database to match employee first name and last name to employee ID. The first thing you would do is click on the cell directly to the right of Field.