SQL injections are far more frequent than you would believe. An attack that stars with several thousand web sites has the potential to reach more than a million within days. The mechanism of infection itself remains unchanged. Only the scope of the damage is what changes