Er, what? SQL injection is
a complicated technique these days?
Come on, it's in
XKCD, for heaven's sake, it's not that bloody complicated...
(In other news, remind me never to use my credit card in the US again; if that many payment providers don't sanitize their database inputs, there is little hope for the web development world...)