SQL Injection

SQL injection: how it works, why it still happens and how prepared statements and PDO stop it.