ph0tmd5

I had this problem and only until I installed mod-security on my Apache web server did the problem (SQL injection) go away. Nothing short of that worked, including following many of the suggestions here.