Refer this url i hope this will give you more information 
about SQL Injection.

http://en.wikipedia.org/wiki/SQL_injection