SQL injections

[jak]

i was doin a small research over the internet about SQL injections since im building a website and i want it to be safe against any kind of hacks. Actually some of u know already about this subject so im here just for some extra info and for the ones that have no idea about it well its kinda interesting!!
As u know behind most of the websites there is a database. This database can be accessed through SQL injections sometimes if the site is vulnerable. Simple injections are done through text inputs, mainly when it comes to login to an account:
The thing is to put ’ OR 1=1-- as a username. the SQL statement will be as followed: SELECT * FROM customers WHERE name = ‘’ OR 1=1--’ AND password = ‘’ we are giving an empty username but we are telling him not to use the username because we have a true statement which is 1=1. so you have to select all rows from the customers table. Well this trick doesn't work on most of the websites so don't bother to try, it was just an info

so any other ways that anyone knows about hacking a website through SQL injections?

[RUSSIAN]

Originally Posted by jak

i was doin a small research over the internet about SQL injections since im building a website and i want it to be safe against any kind of hacks.

Such site can't be built.

[jak]

of course it can't but im doing my best to get all necessary data about the most used techniques and i will try to do my best to make the website as immune as possible

[Google]

I can help you with the penetration testing when the website is done.

[jak]

Originally Posted by Google

I can help you with the penetration testing when the website is done.

Thanks but first i need the techniques to be able to know how a hacker thinks when hes working on a website so i can be able to build a vulnerable one. so if u know any techniques it would be great to tell us about it.
if u want i can pm you my personal email if u dont want to post it to the public.

[Google]

Techniques are many. I won't post here vulnerable websites to show you samples, but if you want, add me. My IM is in my profile.