SQL Injection, by example

#

This is a good intro to the how and why of SQL injection attacks.

Steve Friedl: SQL Injection Attacks by Example.