Checking my calender - yep - almost 2012 and we still have 32% of sites with SQL injection vulnerabilities? Wow. Anyway - good reading and should give any security consultants out there hope for future business opportunities.