Here is a very helpful tutorial on SQL Injection by N3T D3VIL of Root@Shell Security Group.

http://milw0rm.com/papers/174