RE: Way to View SQL Transaction history.. RE SQL Injection

2008-08-11 Thread Jaime Metcher
There's a bunch of transaction log analysis tools out there. We use Redgate's SQL Log Rescue. On a busy site the transaction logs are voluminous and take a long time to analyze. Depending on your situation you may actually be better off analyzing the injected queries, perhaps running them on a

Re: Way to View SQL Transaction history.. RE SQL Injection

2008-08-08 Thread Nathan Strutz
J - It depends on your database, but yeah, you can do that, but it's on the DB server. For MS SQL Server, you can use the SQL Profiler to watch your database live, all the interactions, all the results. It will slow down a busy site if you do it for more than a few seconds at a time, but most site