dfarq.homeip.net
SQL injection explained - The Silicon Underground
I've never seen SQL injection explained really well, so here's a concise explanation of what it is, how it works, and how to prevent it.