SQL Injection
Here is a cartoon for all you database programmers.
For your information, SQL injection is a way that people can break your Web site by filling in forms and querystrings and such with database commands instead of real data. Because the contents of these forms are merged with database commands, it is a vulnerability for Web database systems.
