SQL注入攻击:
http://www.cnblogs.com/tanshuicai/archive/2010/02/03/1664900.html
SQL注入攻防详解:
http://www.cnblogs.com/heyuquan/archive/2012/10/31/2748577.html