With SQL injection attacks flooding the web, Fraser Howard, principal malware researcher at SophosLabs, offers free advice to administrators and surfers on how to avoid falling victim to these attacks