Andy Lester
Andy Lester
https://security.stackexchange.com/questions/128412/sql-injection-is-17-years-old-why-is-it-still-around/129390
SQL injection is a big topic. Add a page of links to other sites on the topic.
https://salesforce.stackexchange.com/questions/130793/build-a-string-for-database-query
http://motherboard.vice.com/read/the-history-of-sql-injection-the-hack-that-will-never-go-away
http://johnroach.info/2011/02/17/why-mysql_real_escape_string-isnt-enough-to-stop-sql-injection-attacks/
http://blog.presidentbeef.com/blog/2013/02/08/avoid-sql-injection-in-rails/
http://security.stackexchange.com/questions/25684/how-can-i-explain-sql-injection-without-technical-jargon#answer-25710
http://www.securesolutions.no/why-its-easy-being-a-hacker/