injection.theory.txt

                                  ┏━━━━━━━━━━━━━━━┓
                                  ┃   INJECTION   ┃
                                  ┗━━━━━━━━━━━━━━━┛

INJECTION ==>                     #Injecting malicious input, due to wrong assumption about input:
                                  #  - constraints: length, value, characters used, type, etc.
                                  #  - client is legitimate
                                  #  - client can't modify input
                                  #Prevention:
                                  #  - validating input
                                  #  - validating origin of input (user, domain, etc.)
                                  #  - escaping|sanitizing input

CODE INJECTION ==>                #Injecting code where data is expected

SQL|PHP|ASP|SHELL INJECTION ==>   #For those specific programming langues

BUFFER OVERFLOW ==>               #Input exceeds min|max length|value
                                  #Prevented by bound checking

XSS ==>                           #See XSS doc