It looks as though a page on our asp site had a field that was susceptible to sql injection and from this they were able to pass a query that...

Hi Jen - many thanks for the reply and also the code to pull off a list of all of the nvarchar and varchar tables in our database, very useful...

Many thanks for that. You've saved me many hours of looking for the solution 😀