SQL注入攻防入门详解
http://www.cnblogs.com/heyuquan/archive/2012/10/31/2748577.html