You might also want to read the article Avoiding SQL Injection Attacks, which provides a good basic introduction.

--Jesse Taylor