noon interview question

What do you know about sql injection? How to defend against it?