Even if a 200 is returned, it cannot be called a success: Reflections on determining actual damage from 9,671 SQL injection attempts

In the logs of a domestic site we analyzed, SQL injection was the category with the largest numbers. There were 9,671 ...