Final countdown

[Raptured]

If that's possible, then it's likely that my global SQL-injection prevention script was disabled or altered. It was a simple method of limiting all post/get variables character length to only what was needed (along with trapping common injection commands). If a command was detected, or the variable exceeded a set length, then the script exited.

I do a lot of development and have moved any accessors to ORMs such as Dapper.  Not sure if it's avaiilable on your platform or not.  It makes use of parameterization of queries which mitigates SQL injection and another benefit is you can call stored procediuires by name rather than method "exec ...".  I hate having inline SQL.