When an application passes untrusted input to an interpreter, that input can change what the application executes. Developers examine common injection patterns, including SQL injection, and practice prevention approaches such as parameterized queries and variable binding. The examples connect interpreter behavior to safer implementation choices.

Participants of this module will…

• Realize the wealth of interpreters used in web applications
• Understand common injection attacks such as SQL Injection
• Gain insight into the mitigation of vulnerability through variable binding