User deleting records from table :(

[GDX]

Can someone help me track down who might be deleting records from a table? The database is linked to about 4 diffrent websites and somehow someone is getting in to delete records im not sure how. I need some ideas on how i can go about tracking down who might be doing this. We have no stored procedures or known ASP code that will allow this to happen. Also the transaction log for this site has stopped logging since last week how can i go about fixing this also?

Thank you

Gordon R. Durgha
gd@vslink.net

http://www.vslink.net

http://www.brainbench.com/transcript.jsp?pid=1217371

 

[mrdenny]

See this thread. thread183-929828

As for the log shipping, check the jobs and see what the error is as to why they have stopped.

Denny

--Anything is possible. All it takes is a little research. (Me)

 

[vongrunt]

On these 4 websites: is there any possibility of SQL injection?

 

[GDX]

I am sure there is i think what im going to do is stop the public from "DELETE" on that table since no records should be deleted anyway only flaged as deleted


I guess there is no way to track down those types of sql injection vulnerabilities right?

Gordon R. Durgha
gd@vslink.net

http://www.vslink.net

http://www.brainbench.com/transcript.jsp?pid=1217371

 

[vongrunt]

AFAIK web server logs track only GET requests, though quick check won't hurt.

You can create user acct. specifically for websites, then do GRANT/REVOKE stuff... this is good practice in web environments anyway, but not a 100% magic pill for injections.