An anecdotal cartoon on what happens if you fail to sanitize SQL input:

Exploits of a Mom (xkcd.com). I can't help but smile at

- Did you really name your son "Robert'); DROP TABLE Student;--" ?
- Oh, yes. Little Bobby Tables we call him.