How are UNION-based SQLi attacks performed? What are some of the first steps to conduct when performing this attack?

This post explains two types of SQLi, and suggests briefly how to counteract them.