Claude, could you possibly share your code that stores the bad IP addresses
for a period of time to prevent these useless http requests? Thanks, CV.

-----Original Message-----
From: Claude Schneegans [mailto:[EMAIL PROTECTED] 
Sent: Thursday, August 07, 2008 9:53 AM
To: CF-Talk
Subject: Re: HELP! SQL Injection Attack!

 >>blocking specific IP addresses won't
get you very far here, because it's a random.

blocking IP addresses won't prevent injection in your database if it is not
protected, but if an attack is detected the very first attempt, it will save
thousands of useless HTTP requests on your sites, because theses robots will
scan everything they find.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310355
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to