I am watching this video right now, and it is an eye opener. Not because of the nasty stuff that SQL Injection can do to you, but because I never really grasped how you can pull data from the database via a SQL Injection unless you have an auto-bound grid.