Our SQL Server 2000 database has been attacked by a SQL injection (nihaorr1) which places a '', '''')
WHERE [' + column_name + '] LIKE ''%%''' +
Char(13) + Char(10) + 'GO' + Char(13) + Char(10)
FROM information_schema.COLUMNS
WHERE Character_maximum_length < 8000
|
