SQL injection is a relatively simple type of attack, and can be avoided with strict adherence to some basic coding practices.