How can I explain SQL injection to my nephew?

How can I explain what SQL injection is to a Non-Techie?