This command instructs the SQL database to delete the table containing all user data.

此命令指示 SQL 数据库删除包含所有用户数据的表。

And we'll do the same with Python and SQL and other languages as well.

我们也将对Python、SQL和其他语言执行同样的操作。

Note also that SQL commands end with a semicolon.

另请注意，SQL 命令以分号结尾。

By sending in a malicious username, with embedded SQL commands!

通过发送带有嵌入式 SQL 命令的恶意用户名！

To do this, the server will execute code, known as a SQL query, that looks something like this.

为此，服务器将执行代码，称为 SQL 查询，看起来像这样。

Either way, we don't care, because it's the next SQL command we're interested in: " drop table users" – a command that we injected by manipulating the username field.

无论哪种方式，我们都不关心，因为这是我们感兴趣的下一个 SQL 命令：“drop table users”——我们通过操作用户名字段注入的命令。

That value is copied into the SQL query by the server, based on what the user typed in, so the actual command that's sent to the SQL database would look something like this, where username equals philbin.

服务器根据用户输入的内容将该值复制到 SQL 查询中，因此发送到 SQL 数据库的实际命令看起来像这样，其中用户名等于 philbin。