Looking for your SQL-injection hole, it might help if you search your IIS logs for "cast" for example.. you will find sql methods in query string portion of URLs.

/Matt

My own content is very dynamic and changes all the time, I will be writing a script to clean up the database.

Regarding the method of the attack SQL injection...

Have the same problem and wold also like some info and quick solution on it.

Regards,

Matt