In an SQL injection attack, a program creates an SQL command and sends it to an SQL interpreter.

在SQL注入攻击中，程序会创建一个SQL命令，并将其发送给SQL解释器。

youdao

Using parameterized commands helps guard against SQL injection attacks, in which an attacker "injects" a command into a SQL statement that compromises security on the server.

使用参数化命令有助于防范SQL投射攻击，在此类攻击中，攻击者会「投射」命令到 SQL陈述式中，对伺服器的安全性造成危害。

youdao

Using parameterized commands helps guard against SQL injection attacks, in which an attacker "injects" a command into a SQL statement that compromises security on the server.

使用参数化命令有助于防范SQL投射攻击，在此类攻击中，攻击者会「投射」命令到 SQL陈述式中，对伺服器的安全性造成危害。

youdao