Feel like messing up some poor administrators day

google the following 'inurl:select inurl:where inurl:%20'
and watch all the evil SQL sqlurls come out.

All the more reason to use cfqueryparam

OMG. I know I shouldn't be surprised any more... but OMG.

Am I missing something? Are you just talking about all of the links to delete statements in PhpMyAdmin?

Plus the full SQL statements via URL params.

If you filter through those you will see a lot of government sites that are open for sql injection attacks

Scion Of Faith