SQL Injection in the Wild
blog.ioactive.com