Hi guys,
I have this bot problem that it is trying to, I am assuming the attempts are malicious, destroy a website that I developed. I'm using just a primitive error handling in such a way that if there is an abnormal query to the website such as a query string which should be in a form of integer is not an integer I would catch the exception that it can cause and save that information to the database and then display a friendly error notice message for the user saying whatever that they are trying to do produced this page.
Now, just recently that database table suddenly just grew extremely huge and I could see from the exception that the query string contained a lot of SQL queries so it seems that whoever made that queries tried SQL injection. Unfortunately for them, the website is secure because the query string parameter that I used is always converted into int and I'm using the SQL parameters when querying to the database.
But this bot keeps doing it in ...
Go to the complete details ...