Coldfusion and SQl Server

[daNewfie]

My site is being hacked...Someone keeps deleting tables from my sql server...is there anyway to prevent this...

My friend is hosting the site at his company so its not being professionally hosted...just looking for ideas..

Craig

 

[Golom]

Have a look at

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetch12.asp

Note particularly the section on SQL Injection Attacks.

 

[chrissie1]

Wich means that sql-server is not the problem but your coldfusion code is!!!

Christiaan Baes
Belgium

If you want to get an answer read this FAQ faq796-2540
There's no such thing as a winnable war - Sting

 

[daNewfie]

I thinks so....I had debuggin turned on which would throw the table name, etc if an error was thrown....I will fic it tonyte when i get home from work

 

[ecobb]

I put some good articles about ColdFusion and SQL Injections in your other thread about this a week ago in the CF Forums. thread232-976082



Hope This Helps!

Ecobb
Beer Consumption Analyst

"My work is a game, a very serious game." - M.C. Escher

 

[SQLSister]

ALso make sure your SQL Server is up-to-date on the service packs.

Questions about posting. See faq183-874
Click here to learn Ways to help with Tsunami Relief

 

[ceill44]

I've used Coldfusion before and read that the links in your webpages feed information to the DB so the thing to do is to hide these links, or start developing in remote flash. Which hides the details of the links.

 

[daNewfie]

I found out that a guy in italy was accessing my database...he was creating up to 5 connections...

measures have been incoprorated to stop him...this has been a learning process I'll tell ya...


Thanks for all the feedback