no i m not using stored procedures :w00t: anyways thanks for you response my next question is i have read from a site that hacker can inject script from url...

thank you very much you all now could you please guide me how can i do

"remove all table access from your website"

brother i in the site above it is automatically trying to navigate to some other url which i dont know.

second thing i suspect some one is injecting such a...

brother i have worked lots of in sql injection if you want my help then please contact me at umer_interlogic@yahoo.com

thanks