The main problem here was that developers where trusting in PHP auto escaping which worked in MySQL (and probably PostgreSQL) but not in MSSQL.
Everything after the 9th word in this sentence should be replaced by a period.
- fwd: Intresting case of SQL Injection Randal L. Schwartz
- Re: fwd: Intresting case of SQL Injection Paul DuBois
- Re: fwd: Intresting case of SQL Injection Jenda Krynicky
- RE: Intresting case of SQL Injection Avis, Ed
- RE: Intresting case of SQL Injection Jenda Krynicky
- Re: [Perl DBI] RE: Intresting case of SQL ... tomg
- Re: Intresting case of SQL Injection Tim Bunce
- Re: Intresting case of SQL Injection Randal L. Schwartz
- Minimum Perl version for DBI? Dave Miller
- meta - new thread? (was Re: M... Randal L. Schwartz
- Re: Minimum Perl version for ... Tim Bunce
- RE: Intresting case of SQL Injection Avis, Ed
