We're running an ASP.NET website with SQL Server 2008.
At least once a week, someone hacks our database. The hit all the tables with any form of text field and append html to it. This causes all the aspnet_xxxxx tables to be useless and prevents anyone from logging in or our website from working.
I have TCP turned off and changed the SA password. All of our queries are parameterized.
We're using Forms authentication.
I haven't been able to figure out which account they're using to do this.
We also have a web service running as well.
We've been dealing with this for weeks now. We have a pretty good idea who is doing it but since I can't find how the update statement is being run, we can't be sure.
Any suggestions?
Go to the complete details ...