Added: May/29/2009 at 12:20pm | IP Logged

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC Microsoft Access Driver] Syntax error in query expression '(Banner_ID = 146;create table t) AND Banner_Day = #2009-05-29#'.

In trying to find where that "create table t" would have come from, I saw that the tempstats folder had a file named:

2009-05-29_146;create table t_jiaozhu(jiaozhu varchar(200))_clicks.tmp

so it looks like someone has figured out how to hit the banner system with a request that actually tries to store its own crud into the database.

Has anyone seen this before, and can you recommend a barrier to it?