SQL Injection from website to SQL Server

This session was not selected for the final agenda at SQLBits XI