http://www.sqlservercentral.com/blogs/steve_jones/2007/02/22/hacked/

Printed 2013/05/22 12:53AM

Hacked

By Steve Jones, 2007/02/22

Boy that was fun. Getting a bunch of emails that we had been hacked and tracking down someone updating all of our link addresses with their name. Fortunately it didn't take too long to fix, but it certainly was a pain.

I know we're vulnerable to SQL Injection in quite a few places, but not sure how much fun this will be to fix.