Remember the good old joke about choosing a secure password and not using your cat’s name as one, even though it is MySup3rKittyCat13*? Well, that is now obsolete – a better way is to name your kids with SQL injection names. Xkcd has an example:
And if you think that this is all just a joke, I assure you it’s not. Here is a serious question at Stack Overflow that starts with:
We have an employee whose last name is Null. He kills our employee lookup application when his last name is used as the search term (which happens to be quite often now).
True story, apparently.