SQL injection attacks have been the bread and butter of system crackers since the first SQL database became Web-enabled. Channel Test Center engineers offer a step-by-step strategy for blocking them.