Just how bad is it if your site is vulnerable to an SQL Injection? Dr Mike Pound shows us how they work.