[This article and some of its code snippets are adapted and put together from 
http://ethicalhacking.org.ua/ 
http://articles.sitepoint.com/article/sql-injection-attacks-safe/3 ]

] 

SQL Injection is an attack method that targets the data residing in a database through the firewall that shields it. It attempts to modify the parameters of a Web-based application in order to alter the SQL statements that are parsed to retrieve data from the database.