Hacker Attempt

[code green]

May be the wrong forum but I had this attack via a web form

declare @q varchar(8000) 
select @q = 0x57414954464F522044454C4159202730303A30303A313527 exec(@q) --

It didn't get past first base but anybody with the same experience?
I think the Hex translates to a WAITFOR command.

[RedSon]

Looks like an SQL injection attack:

http://en.wikipedia.org/wiki/Sql_injection

[Atli]

The hex translates into:

WAITFOR DELAY '00:00:15'

It just basically freezes the query for 15 seconds. Kind of pointless by itself, really.

It has no effect on MySQL though. WAITFOR is a T-SQL (MSSQL) command, which doesn't exist in MySQL.

[code green]

I've googled the hex and it seemed to first appear around April.
The blame is pointing to a German.

Quite a few sites seemed to heve been attacked.