A guide to preventing SQL injection
bobby-tables.com