help Wanted against sql injections

[groogz]

how to prevent attack against sql injections?? tips pls!! and how can webmaster trace the security whole?? that frm where he is getting attacks..

 

[mahjong]

sql injections are the results of badly written code - for example public forms saving to the database, or search forms without any kind of special character escapes. I'm not an expert at programming but you should look at these functions if you are using php:
http://php.net/manual/en/function.mysql-real-escape-string.php
http://php.net/manual/en/function.htmlspecialchars.php

Good luck!