I've been successfully running IIS6 on Server 2003 with the Indexing Services for a search page. Everything is working fine. But, in order to be PCI DSS compliance, I need to rewrite the page so that it doesn't leave the "search" page open for sql injection. Is there an example out there or someplace that would demo how to do this against the Index Services?