What are some resource for learning about and preventing SQL injections?
One of the most important assumptions about SQL injection is: assume that all data coming from the client (web browser) is suspicious. Preventing SQL injection then deals with filtering this data on the server side. If your scripting language allows parameterized queries, that is a great line of defense.