I monitor my home page every 15 minutes for change. You can use any of the free tools, or set up a cf scheduled task to do it. I add a url parameter that tells the home page to dump all of the data in the users table for my own entry. (My name, address, phone, etc).
IF that page changes, I get an email and a text.. this lets me know: 1. If the site is down (either sql server or cf) 2. If there was a successful sql injection attack 3. If those ftp attacks succeeded and my home page was defaced or a script inserted. I have a banner ad that changes and a date last updated notice that changes. I added comments around those that tell my monitor not to worry about those sections.. On new years eve I got a text the page changed.. I forgot that the copyright notice changes automatically for the year! At 12:48 PM 1/18/2010, you wrote: >monitoring SQL Injection they are willing to share? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329787 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
