lilupophilupop SQL Injection Attack happening ATM

[Dijkgraaf]

Thousands of ASP and Coldfusion sites with MS-SQL back-ends and are being compromised by a SQL injection attack.

[isc.sans.edu ]

[musicales]

I have a site that was affected but it is so big it's difficult to trace where the input is. I can turn on the logs for a limited period. But the site gets a lot of traffic so I soon have to turn the logs off or I run out of space. Does anyone know of any way I can track the inputs and catch them as they happen so I can trace which script is causing the probelm - eg email me if any input uses the word 'script' or whatever?

[Ocean10000]

Does your site use ASP Classic or ASP.net?

[musicales]

I use classic ASP. Luckily I discovered Urlscan which has solved all my problems as I'm able to server-wide filter urls.