Everything You Wanted to Know About SQL Injection
http://www.hiveminds.co.uk/node/3104

McDade, Carl
Hiveminds
2006

Abstract:

If you are a CMS user or web developer then you should know what SQL injection attacks are and how to protect your web applications against them. Hackers are using more SQL based attacks, getting smarter about how to attack a website and using better tools. You have to get a good understanding of how their attacks work if you are going to choose the right software and keep your website secure. Here I will review several types of SQL injection attacks and how they occur. Then take a look at what web developers and end users can do to prevent them.