Just want to chime in on this -- I also stuck Justin's file online, and in just a few minutes, I had two of these email warnings. Very helpful for my naive non-parameterized pages. One thing I like about the email is, it tells me my domain and page of the attack -- and also the IP address where it came from-- something I just didn't know before.
Now, let's see, you are telling me I have to itemize every variable in every query -- 180 database tables, 20-100 variables per table, 1000 queries per site, 20 sites, hmmm..... You were saying something about automation, Brad....? Gotta look into that..... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310453 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
