the idea that NASDAQ might've been hacked using an SQL injection is pretty scary, as it's a pretty trivial attack to protect against in most cases (mysql_real_escape_string?) - is security in stock exchanges really so lax?
"SELECT ... WHERE `field_name` = '" . mysql_real_escape_string($string_value) . "'";