SQL injection explained in depth
Historical article · Originally published March 26, 2003; technical details may be outdated.
Two more nice articles posted regarding SQL injection. A bit late, but here they are:
Sounds like an explanation on how .NET can mitigate it... For more background, check out Advanced SQL Injection and More Advanced SQL Injection; they're excellent.
[via Incessant Ramblings]