SQL Injection for Dummies
SQL Injection
& other lame database hacking methods
O'REALLY
Written by Rodrigo D.