mr.gr33n, your SQL Injection on suggestions.yahoo.com, but "hacker's" injection on local.yahoo.com PS: My first post in this board