SQL inside programs

How to write SQL inside RPG, why SQLCODE zero does not mean everything went well, and where injection hides on this platform too.