In PHP, code injection typically involves inserting malicious code into PHP scripts, allowing attackers to execute arbitrary commands on the server or manipulate data.