SQL Injection (SQLi) is a type of injection attack, where the attacker can inject and execute malicious SQL statements that will control a database server behind a web application.