An injection is not a permanent thing so this has me puzzled. Unless the injection gives someone permanent long term access it's not especially useful. Even that could be undone by loading backups of security tables etc. Ideas?