SQL injection is a code injection technique where attackers manipulate SQL queries to access or damage databases.