I have 3 database Db1,Db2 and DB3. DB1 is constantly geting attacked by sql injection attack(Some script get added as <script ..http;;///. .......</script>. I googled and found that ASP pages are causing this. Also many application accessing DB1 are written in ASP while for DB2 and DB3 all aplications are written with ASP.2.0 and stored procedures.
How do I resolve this now?. I am now converting all ASP pages to aspx. I converted 80% of asp apges to ASPX. But agin today the DB1 db(frequently accessed tables) were attacked. I am not using stored procedure while converting from asp to ASPX due to time restriction.
WIll this fix problem or should I make sure I implement using stored procedures also. Due to time limit I am trying to find a quick solution so that we don't get more calls from customer.
Thanks advance for the help..
...
Go to the complete details ...