Security problem

Hi,

I have a site which was twice hijacked by HTML:CVE-2007-0024 exploit. Not sure how it works, but isn’t something that could be done also at the server level in order not to allow such things? I know I did protect my script for SQL injection. Any hints on what might be done to better protect the script?

See the SQL Injection threads in the database section for links with tips on protection from injections, serverside there is not a lot we can do :frowning: Injections can come in so many forms.