title: Setting up a SQL injection honeypot
body: <p>I just stumbled on a website vulnerable to an SQL injection attack by mistake ( <a href="https://stackoverflow.com/questions/6181248/is-this-site-vulnerable-to-an-sql-injection-attack">Is this site vulnerable to an SQL injection attack?</a> ).</p>
  
  <p>That made me curious about what is tried and how often an attack attempt comes by on some website.</p>
  
  <p>So I'm thinking it would be cool to setup a honeypot on my server to see if / how often / using what techniques 'crackers' try to get access to my SQL data.</p>
  
  <p>There are some basic things I can think of to lure them, like:</p>
  
  <p>/login.php / asp url</p>
  
  <p>/adminlogin.php / asp url</p>
  
  <p>A searchform</p>
  
  <p>?id=111 url</p>
  
  <p>with some fake SQL errors when trying to inject some SQL.</p>
  
  <p>Anybody has some more / better suggestion / ideas / whatever to set up a honeypot for SQL injection?</p>