且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

我的事件日志已满ViewState中的无效和未处理的异常

更新时间:2023-10-29 18:32:04

您已经针对与SQL注入攻击或者由机器人或一些随机的黑客在商店寻找信用卡。在线商店都在不断袭击,你将拥有更多的攻击,你可以想像的。

You had been targeted with an SQL Injection attack either by a bot or by some random hacker looking for Credit Cards in shops. Online shops are constantly attacked and your will have more attacks that you can imagine.

在为prevent此类攻击,你可以安装一个Web应用防火墙,如mod_security的(仅适用于IIS和Apache)。该插件将检查所提供的要求,分析它,并停止每一次进攻意图它传递给你的应用程序之前。

In order to prevent this kind of attacks you could install a Web Application Firewall such as mod_security (available for IIS and Apache). The plugin will check the provided request, analyze it and stop every attack intent before it's passed to you application.

Web应用程序防火墙仅仅是多了一个缓解措施,真正的解决办法是有一个安全的code。在这种特殊情况下,你可以实现堆查询,限制权限,验证输入(在这种情况下,你的应用程序应该首先捕获错误并处理它当适当它不接收整数参数),并妥善处理错误(如显示一个定制的页面,没有违约可能公开内部信息)的错误。只是命名一些。

Web Application Firewalls are just one more mitigation measure, the real solution is to have a secure code. In this particular case you could implement Stacked Queries, limiting permissions, validating input (In this case your app should catch the error first and handle it properly when it's not receiving an Integer parameter) and handling errors properly (such as showing a custom page and not default errors which could expose internal information). Just for naming a few.

在情况下,你需要知道什么特别让我知道。

In case you need to know anything in special just let me know.