Stopping SQL Injection and Building Secure WebApps

Here's a paper (PDF) from Oracle on writing "injection-proof PL/SQL."

Also a guide shown to me by a friend on building secure webapps (from OWASP).