People have answered you question well enough here but for general questions about web application security I recommend OWASP. Here's the section on SQL injecti

People have answered you question well enough here but for general questions about web application security I recommend OWASP. Here's the section on SQL injection: http://www.owasp.org/index.php/SQL_Injection http://www.owasp.org/index.php/SQL_Injection