Bertrand Le Roy has an excellent introduction to injection attacks.

If you’re doing web development and don’t know what an injection attack is or how to prevent them, you have got to read this.