How to Prevent SQL Injections?

SQL injection attacks, injects or manipulates your SQL query to obtain results in unanticipated ways.

The general way of validating a user on a web site is to provide a HTML form through which they can enter Username and password.The easiest way to validate this user would be to build an SQL query, and then check that query against the database to see whether that user exists.

(more...)