2008-09-10 SQL Smuggling Or, The Attack That Wasn't There http://www.comsecglobal.com/framework/Upload/SQL_Smuggling.pdf