Hi,
I have a site which was twice hijacked by HTML:CVE-2007-0024 exploit. Not sure how it works, but isn’t something that could be done also at the server level in order not to allow such things? I know I did protect my script for SQL injection. Any hints on what might be done to better protect the script?