The Bobby Tables guide to SQL injection
blogs.techrepublic.com.com
blogs.techrepublic.com.com
A post of the xkcd comic (http://xkcd.com/327/)
A link to the actual meat of this article (http://bobby-tables.com/)
A few URLs (mostly unread by the author) that all show up on the first page of a Google search for "SQL Injection" (http://www.google.com/search?hl=en&q=+SQL+injection&...)
http://news.ycombinator.com/item?id=823994
(And note that there are significant caveats to this "guide".)