SQL injections are most dangerous web attacks on web applications. Testers need to test web applications for all web vulnerabilities. This articles explains SQL injection methods with sample SQL statements that are commonly used by attackers for hacking database and compromising important information.