SQL Injection Attacks by Example
Steve Friedl has written an excellent article called SQL Injection Attacks by Example. It shows not only the various attacks, but also does an excellent job of explaining each attack from the viewpoint of the browser. He also explains how to defend against each attack.
