sql injection explaination

[haoqili]

• put in sql query
• show it with evil input
• show it with result of evil input (example of what would happen without sql fix)
• let user put in, see that it doesn't work