thats what you call sql injection,
the hackers inject commands in our mssql,,.
like dropping the databse,.
deleting tables,
shutdown the sql,.
and FYI sql injections can be executed through our control panel...
fire wall is not effective with..
try to turn of youur control panel,. and observe if they can still inject your mssql,.
or read on how to prevent an sql injection,.