One of the things I was curious what URLScan actually scanned and how. What is just some server variables or what?! I asked Wade H from the IIS Team for further explaination. It is good to be aware when you are implementing URLScan 3.0 and sql injection...(
read more)
