Using SQL injection, we can run unintended commands against website databases.

Can you think of things that we can do with the database?

Tamper with user dataDownload all of its dataBecome the database administrator

Correct! Again, we can do all of these things with SQL injection.

Think again! SQL injection allows us to run simple and complex commands.