I have explained the concepts behind SQL injection dozens of times. I think I will start using the following comic as a starting point: xkcd – A webcomic of romance, sarcasm, math, and language – By Randall Munroe.