SQL injection is a way for bad people to get access to your information or website. It happens when bad people try to enter coding into a web page or computer system. The coding looks similar to regular words, but it can make the system do something it's not supposed to do, like giving away information or giving bad people access to your website.