There is a misunderstanding about SQL Injection attack in that some people think that that is is restricted to Microsoft. Here is a case where it happened on a PHP system.
see http://www.securityfocus.com/bid/49094/references