How one site dealt with SQL injection attack (via) Horrifying story of developer incompetence from Autoweb: “The contractor had no idea how to find and fix the Web page vulnerability that allowed the SQL injection attack code to execute successfully.”
Sign in with 
OpenID
Not sure how this counts as incompetence, they had clearly contacted the wrong type of contractor. It happens. At least he was honest enough to tell them to find someone else.
Noah Slater - 3rd May 2008 14:36 - #
I should have posted a bit more context; that's the contractor that built the site in the first place.