Great beginners article to SQL Injection... worth the read...