
Hi,
Have a look this beautiful article which explains about the SQL-Injections .Every developer should take care about this special character to prevent the site hacking.
http://www.criticalsecurity.net/index.php?showtopic=13830
Regards
Pankaj