Ever wanted to actually trigger a SQL injection yourself instead of just reading about one? Your first sql injection walkthrough doesn’t need a real target, a VPN, or any legal gray area at all. PortSwigger’s free Web Security Academy was built exactly for this. This post walks through the actual lab, step by step, plus the fix a real developer would ship afterward.