SQL injection attacks have nothing to do with whether they are on a shared box or running in a locked down cage. If they have any hope of fixing this mess, they need to start from advice that helps, not voodoo.
I just meant if they had their own box they would have more control over it.. they said they had to wait for a support guy with perms to do the db restores.
