banksidepoet

I would like to record, when the malicious SQL code updates records, the IP address of the computer from where that input is coming AND a timestamp.

Don't you think it is a better idea to prevent SQL injection rather than trying record information who did it?

http://www.mikesdotnetting.com/Article/113/Preventing-SQL-Injection-in-ASP.NET