WikiJuanan:
SQLInjection
SQL
SQL injection cheatsheet