Re: Logging of SQL statements

[Diego Kesselman <diegokesselman@xxxxxxxxx>]

Cindy,

you can use an Exit Point Program to log all SQL statements (build your 
own or buy a product), start a database monitor or trace SQL statements 
from the application server. It depends on what are you trying to catch.

You can use commercial products to protect your application, but first 
I'll scan the application(s) to prevent SQL Injection issues.

Regards

Diego E. KESSELMAN


El 07/08/17 a las 11:08, Cyndi Bradberry escribió:
> Is there a way to log the specific SQL statements used by a particular user profile ?  That captures the actual sql statement ?  We are looking to trap all sql statements in order to back trace in the event of an sql injection  attack from our web services.
>
> Thanks,
>
> Cyndi B.
> Boise, ID