sql injection attack

An SQL injection attack is when someone is able to destroy your website's database because someone was too lazy to add one extra line of code that sanitizes input before sending it off to the database.

How did they do a sql injection attack? I hired the most expensive web programmer craigslist had to offer!