sql injection

Sql injection is outdated, but however do check if u have a website based on database query  is a victim of sql injection
A simple example of a SQL injection attack is to use the single quotation mark as part of
an input value to a Web page.Database Server ignores everything after "--" or "#" because these characters are the single line comment sequence.Another example of a SQL injection attack is making the condition true by giving the identical value to a web page.
These values can be inserted into a login as follows:
o Login: 1' or '1'='1 and Password= 1' or '1'='1
o Login: 1' or '1'='1';--
o  Login: admin’--
o Login: admin'#
Measures to prevent sql injection:
o Input Validation on the SQL injection
o Use Javascripts that  allow only known good input from the Web server to the
     Database server.