> It's a classic story. I'm volunteering about one day per month for
> this project, learning SQL as I go. Priority was always given to the
> "get it working" tasks and never the "make it safe" tasks. I had/have
> grandiose plans to rewrite the whole system properly after I graduate.
> Unfortunately, the inevitable corruption didn't wait that long.
As you're learning, it sounds like parametrized queries might have saved you
from the sql injection that caused this.
Chris
> Cheers.
>
> -Gus
