SQL Injection

What's SQL injection all about, what forms does it take, and how can we stop it?