In the face of mounting attacks, Microsoft is offering administrators and developers advice on preventing SQL injection..
Microsoft offers advice on SQL injection