“How do you do a SQL injection?” (I actually had this question at a job interview)