>>I think it would make sense to research it fully. Here's a few to get you started:
>>
>>http://www1.cs.columbia.edu/~angelos/Papers/sqlrand.pdf
>>http://www.securiteam.com/securityreviews/5DP0N1P76E.html
>>http://www.codeproject.com/KB/database/SqlInjectionAttacks.aspx
>>http://msdn.microsoft.com/en-us/library/bb355989.aspx
>>http://blogs.technet.com/swi/archive/2008/05/29/sql-injection-attack.aspx
>>http://www.colinmackay.net/tabid/57/Default.aspx
>>http://msdn.microsoft.com/en-us/library/aa224806.aspx
>>
>>There are some appliances and tools like WatchFire AppScan, Applicure's DotDefender, or eEye's REM Security Management Appliance. Most are cost prohibitive though.
>>
>>One thing you can do though is download the trialware of some checking tools so you use it as a test to check for vulnerabilities....
>>
>>http://www.security-hacks.com/2007/05/18/top-15-free-sql-injection-scanners
>
>One more link to the tools to complete the picture.
>
>http://www.misfitgeek.com/Tools+To+Block+And+Eradicate+SQL+Injection.aspx

Ah nice one. I thought I included that. Thanks! :)