Microsoft recently released a Security Advisory (954462) stating that web sites are being attacked via SQL Injection techniques . Most attacks typically try to exploit the operating system (IIS, SQL Server, Windows, Linux, Apache, etc.). SQL Injection's