Q: What is an SQL injection attack?

A: It occurs when front-end code is not properly sanitised and is passed directly to the database, causing the database to return an error or execute unintended commands.