The Daily WTF has a great SQL String entry. Best part for me is the final 'added clarity' comment :)
WTF? Someone doesn't know what the hell parameterized SQL is about. Jesus that's not funny... it's sad.
It's almost code that makes you go "WTF?". Daily :)