[cfaussie] Re: Constant query injection attacks

2008-08-28 Thread Barry Beattie
We need some sort of go and sit in the corner place on the WWW :) wot, sort of like a black hole for packets to disappear down the plughole of? a /dev/null of the interwebs? --~--~-~--~~~---~--~~ You received this message because you are subscribed to the

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Andrew Scott
Your ISP is a good start or even the AFP, but I am sure the AFP will try to get you to talk to your ISP first. -- Senior Coldfusion Developer Aegeon Pty. Ltd. www.aegeon.com.au Phone: +613 9015 8628 Mobile: 0404 998 273 -Original Message- From: cfaussie@googlegroups.com

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Kevin Pepperman
We had the same thing happen on many different apps. I ended up with 1000's of emails. We ended up adding this to our application.cfc in the onrequestStart method. all the hack attempts had declare in them-- so this blocks the request and we dont need to wait till it reaches the cfqueryparam

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Matthew
Hi Kevin: Just what I was thinking - thanks! Hi Andrew: we are co-located so do you mean go to the ISP of the nocs center provider? Anyway, I doubt the AFP would even lift a pen/batton. I was hoping that there'd be some sort of international internet body that investigates complaints. Oh well,

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Seona Bellamy
Instead of just blocking them, we send them off to http://www.cybercrime.gov/ I doubt it makes much difference, but there's an irony there that I like. :) Cheers, Seona. 2008/8/27 Matthew [EMAIL PROTECTED]: Hi Kevin: Just what I was thinking - thanks! Hi Andrew: we are co-located so do you

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Andrew Scott
Actually you will be surprised what the AFP will do, but they would prefer you to follow the ISP / hosting provider. The reason being is that any form of an attack, even one like this is a criminal act on all fronts and is very much indictable . But the thing is that by reporting it to your ISP

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Andrew Scott
] On Behalf Of Seona Bellamy Sent: Wednesday, 27 August 2008 2:31 PM To: cfaussie@googlegroups.com Subject: [cfaussie] Re: Constant query injection attacks Instead of just blocking them, we send them off to http://www.cybercrime.gov/ I doubt it makes much difference, but there's an irony there that I like

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Seona Bellamy
: Constant query injection attacks Instead of just blocking them, we send them off to http://www.cybercrime.gov/ I doubt it makes much difference, but there's an irony there that I like. :) Cheers, Seona. --~--~-~--~~~---~--~~ You received this message

[cfaussie] Re: Constant query injection attacks

2008-08-26 Thread Matthew
I like that idea Seona. We need some sort of go and sit in the corner place on the WWW :) --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups cfaussie group. To post to this group, send email to cfaussie@googlegroups.com