Characters written into an input form are treated as part of a command to the database. This is the basis of SQL injection.

The content of this article might be a bit difficult for those with no programming experience.This is because, in my ...