From: Adam Flinton 

Antti Kurenniemi wrote:

> I wouldn't blame those on PHP (though it certainly makes it very easy to
> write unsafe code), but more on lazy / incompetent developers / testers. I
> think it doesn't really depend on what language you use, if you do database
> stuff that has any user input you simply must validate all input before
> proceeding, in each and every step.
>
>

Yup. I've seen SQl injection attacks against SQl Server behind IIS.

Adam

--- BBBS/NT v4.01 Flag-5