Full threadalexjeffrey·Relevant Bruce Schneier: http://www.schneier.com/blog/archives/2008/04/sql_injection_...View on HN