Geek asks and answers

Asp.net - How to clean up after SQL Injection Attack?

I have some old sites that have just been disabled by my hosting company, apparently due to an SQL injection attack. I looked into my database, and yes, I was hacked. * Oops *

My database is filled with script tags that were added to my source data (at least my source data is still there, so that was good).

I looked, although my old code and saw some unanitated input places, so obviously I will carefully consider this and check more. I also download a hacked site to compare it with the version I downloaded many years ago (using some kind of file verification program), this should let me see if they tried to add a backdoor.

My questions...

1) Is there a way to remove all attached tags for scripts from my database, since they are all the same?

2) Is there anything else I should know or miss?

I would like to note that these old sites do not store sensitive material, so it does not matter much, I would just like them to start again and again.

I delve into my security knowledge and soon delete all files on the host, change all passwords and upload an improved (and less hacker) site.

Thank...

+3
source share
4 answers

In particular, when I answer the question about replacing the script tag, I see nothing but a manual task.

I am sure you have considered this, but a simple field replace statement should get this stuff:

update MyTable
set field = replace(field, 'unwanted', '')
where field like '%unwanted%'

, , - , SQl. - :

DECLARE @ColName varchar(255), @TableName varchar(255), @sSQL varchar(1000)
DECLARE colcur CURSOR for
 SELECT name, object_name(id) 
   FROM syscolumns
  WHERE name = 'Moniker'

  OPEN ColCur
 FETCH NEXT FROM ColCur 
  INTO @ColName, @TableName

WHILE @@FETCH_STATUS = 0
BEGIN
    Set @sSQL = 'update ' + @TableName + ' set ' + @ColName + ' = replace(' + @ColName + ', ''unwanted'', '''') where ' + @ColName + ' like ''%unwanted%'''

    exec(@sSQL) 

    select @ColName, @TableName
    FETCH NEXT FROM ColCur 
    INTO @ColName, @TableName
END 

CLOSE ColCur
DEALLOCATE ColCur
+2

, :

  • . , " ", 404.
  • , , .
  • , , SQL-. , .
  • .
  • ().
  • , , , .
  • .

, , , , , 6 7.

+2

, , , . , . , , , , , .

+1

SQL-

.

0

More articles:


All Articles