Hi All, I just posted a short white paper on Microsoft SQL Server and SQL Injection titled "Manipulating Microsoft SQL Server Using SQL Injection" at: http://www.appsecinc.com/news/briefing.html#inject14 The paper was written and researched by Cesar Cerrudo (sqlsec@yahoo.com). All comments are welcome. Regards, Aaron _______________________________ Aaron C. Newman anewman@appsecinc.com CTO/Founder Application Security, Inc. www.appsecinc.com Phone: 212-490-6022 Fax: 212-490-6456 - Protection Where It Counts -