Aon Interview Question

What is a SQL injection? How do you prevent it?