Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: unknown (athena.apache.org: error in processing during lookup of
 tom@ng23.net)
Message-ID: <487CB9AC.9020003@ng23.net>
Date: Tue, 15 Jul 2008 15:52:28 +0100
From: Tom Brown <tom@ng23.net>
User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421)
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] apache > iis asp > mssql

Hi

I have apache sat in front of some IIS servers to do some logging, they 
just pass the request over to IIS. I have an issue where there are sql 
injection attacks coming through and i wonder at the URL level can i 
filter these out and thrown them away at the apache level. I am checking 
through but it seems that 'VARCHAR' is being used in the attack but not 
in any valid URL - Is there any rewrite or similar to be able to 
mitigate this?

thanks


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org