Cathal:

I know that everybody at the DNN organization is pretty busy but I would like to suggest to the DNN security group to do some research (if you guys haven't already) on what to look for in the DNN logs and the IIS logs to see if our DNN sites have received requests to inject the malicious SQL code in question.  As I have read on the provided link as well as other sites, this new round of SQL injection attacks is not random and are organized by one or a few specific groups.  So if a specific http request signature would be provided for us to look for that would be great.

By the way, if you guys gather some numbers on how many sites have received SQL injection attempts vs how many were or were not penetrated that would be great PR for DNN.

Just a suggestion...

Carlos