> I've seen stuff built with spaghetti PHP code, yet it was marketed well and more people were paying money to use it than my own. Yet when I looked at it, the first thing I saw was an SQL injection vulnerability that would allow me to drop the entire database.

Ironically, unless they're doing a side business in Microsoft product keys, specialname.cn was hacked until at least a couple of hours ago (according to Google's cache).

http://archive.is/FLd2M