your application code. Let’s take a closer look at each approach. Take advantage of SQL Server . The benefits of using stored procedures in SQL Server rather than application code stored locally ...

While Forristal looked at Microsoft's software first, SQL injection was an industry-wide problem; sites using Java, PHP, ColdFusion, Ruby, and Python have all had SQL injection flaws.

If you're able to telnet to port 1433, try opening the Microsoft Query Analyzer. Use the login combination you tried above to verify that a user name and password combination exists for your SQL ...