Suggest you read "Trouble Shooting Metadata Visibility"
scroll to the bottom of the page and review:
"Metadata Visibility Configuration"
Plus search this site for many, many articles discussing injection attacks, and how to thwart them.
Also search Microsoft for a new tool recently announced by Microsoft to help analyze your code for areas potentially open to injection attack.
Hope this helps.
If everything seems to be going well, you have obviously overlooked something.
Please help us, help you -before posting a question please read[/url]
Before posting a performance problem please read[/url]