SQL Injection in JSON

Thanks Bruce for making it clear so even I can understand it.