Although I covered the details of Hacking using SQL Insertion attacks the other day, but I these videos popped up in my youtube suggestions today, both from Computerphile (always worth watching if you’ve any interest in computing), but one of them by the always watchable John Scott (if you don’t watch his videos already, then have a look, there’s some amazing and fascinating stuff in there, and you can quickly lose an hour or two).
But have a watch, they both probably explain things a load better than I managed (even if they both call it SQL Injection, where I’ve always called it SQL Insertion).