J - It depends on your database, but yeah, you can do that, but it's on the DB server. For MS SQL Server, you can use the SQL Profiler to watch your database live, all the interactions, all the results. It will slow down a busy site if you do it for more than a few seconds at a time, but most sites you can let it run for a while without problems.
nathan strutz http://www.dopefly.com/ On Fri, Aug 8, 2008 at 7:31 AM, jonese <[EMAIL PROTECTED]> wrote: > Hey all, > > So far we've been good but i'm helping some other companies who have > experience successful SQL injection attacks. > > Is there any way to see the log files of every transaction for a DB so > we can see which queries failed and which ones were a success? > > jonese > http://www.jonese.us > http://twitter.com/jonese > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310560 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
