For some reason it fails as soon as I try to open a connection to the DB unless they are in the db_owner group... i'm not sure what permissions are...

cool... thanks for that. I'll see how I go with it!

I found this article for granting execute permissions to all stored procedures for a user / role

The original article is...

Oh no! I've been called out now 😉

It's essentially the same as the decoded output as indicated in the first post in this thread...

It was made very quickly and is...

If the injection attack inserts script tags into text columns, then I have a script that can help remove them. I based it off the original injection query, so it...