One of the greatest time-savers in web development is the use of dynamic pages to serve up database driven content. The most common examples of which are content management systems and product information pages. More times than not these pages hinge on a querystring parameter such as /page.aspx?id=12345 to determine which record needs to be retrieved from the database and output to the page. What is surprising is how many sites don't adequatly validate that crucial parameter. [More]