I've never seen SQL injection explained really well, so here's a concise explanation of what it is, how it works, and how to prevent it.