Talk of SQL Injection always reminds me of this xkcd comic, which should never be forgotten by database professionals - Little Bobby Tables[/url]