Learning resources for secure web development (SQL specifically)

Question

I am a relatively experienced hobbyist web developer, but am concerned about my lack of knowledge covering potential security holes in web sites/services. I am looking for documentation covering best practices regarding security, especially when dealing with SQL databases.

Attempts at searching are being thwarted by the fact that Google seems to equate "SQL" with "Microsoft SQL Server". I'm using PostgreSQL here.

Free resources are better right now, but dead tree is interesting too.

Answer 1

• Google Code University - Web Security. - The second video is specific to cross-site scripting and SQL injection attacks
• Foundations Security Every Programmer Experts Should Know
• W3 School on web security
• Hacking for Dummies.