title: How does SQL-injection work and how do I protect against it
body: <blockquote>
    <p><strong>Possible Duplicate:</strong><br>
    <a href="https://stackoverflow.com/questions/601300/what-is-sql-injection">What is SQL injection?</a>  </p>
  </blockquote>
  
  
  
  <p>I see a lot of php code floating around on stackoverflow and (too) little escaping of strings.</p>
  
  <p><strong>Can anyone</strong></p>
  
  <ol>
  <li>Explain what SQL injection is;</li>
  <li>Explain what it can do to your server, data and code;</li>
  <li>Give an example how to perform an SQL-injection</li>
  <li>Give php sample code how to protect against SQL-injection</li>
  </ol>