Watch this video on YouTube
What is the best way to protect against a SQL (Structured Query Language) injection attack?