String-Concatenated SQL
Kind: anti-pattern
Layer: Security Core
Record: lexicon:string-concatenated-sql
Canonical: Lexicon
Assembling SQL queries by concatenating untrusted input into strings, opening the system to SQL injection.
Listed in Lexicon terms, after Single Control Reliance and before Trusted Internal Network Assumption.