They're not just scripters. RCU is not that easy to hack. Unfortunately, they are very clever, it's SQL packet insertions masquerading as forum posts with malicious content hidden in them, it seems to be fairly deliberate attacks. They've already been patched out twice before, and keep finding a new way in. RCU is not the only site being hit. Still, the impact is so negligible on us, it's virtually pointless, we lose a couple of hours of posts, they have to find another way in to spread their mildly irritating content, they're really wasting their time, and the sooner they realise that the better. Don't worry about it guys, we'll have them locked out again soon. I hear another solution was reached today and is being implemented. The first round of intrusion testing proved secure. We'll see. Like Marc (RCAdmin) said, it's a a game of cat and mouse. Probably schoolkids with a talent, seriously.