Understand how to prevent SQL injection vulnerabilities in WordPress
Brian Krogsgard
Samuel "Otto" Wood describes the prepare() function, and why it matters. For anyone playing with SQL in their work, you should make sure you understand these basics that Otto quite clearly explains.

