The SQL command “DROP TABLE” instructs a database server to delete an entire table of data. By adding a semicolon (“;”) into the injected code, an attacker could trick the server into ...

And attacks using SQL injection are abundant. ... Some databases let you run command-line programs from within queries, which again can be all hackers need to do their dirty work.