the attacker can't actually see the response to the SQL injection attacks, which limits his ability to use this technique to probe systems. Unless they search for those pages in Google. SQL injection ...