New SQL inject ?

Someone keeps teasing with my database (truncate talbe , create GM account , bla bla )
it was related to Procedures Memo_Add ?
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
:handsdown:

I think he is using old chernobyl's sql injection, block your iis port & everything will be fine.

you could fix it using packet filter using send msg packet
and read ascii of msg and charname
because i'm not sure what of them are allow injection
then check if they contain ' || /
ignore or block