i wrote a tutorial on this site about sql injection under ethical hacking