Get Last Running Query Based on SPID
Put a trigger on the table that checks if the anonymous action has occured, and in this case log the output of DBCC INPUTBUFFER(@@spid) to a table. Then find the beginning of this statement in your application and fix the injection hole


Comments
Post a Comment