What's your situation with regard to web application SQL injection? Are you testing for it from all the right angles? Many people have discovered SQL injection vulnerabilities in their environments ...