What is a SQL injection attack and how does it work? What are some common vulnerabilities in web applications that can be exploited by SQL injection attacks, and what are some best practices for preventing them?

When a user submits a form on a web page, how can PHP and MySQL be used to process and store the form data in a database? What are some best practices for handling and validating user input to ensure data integrity and security?