Trusting Input and Outrunning Lions
Rhys Wilkins has written an article about - wait for it - stopping SQL injection AND Outrunning Lions! You have to read to the end of the article to understand how the Lions fit in :-)
Rhys' article is available via this link.
Enjoy.