title: logging urls in IIS
body: <p>A little over a year ago we started getting hit with sql injection attacks.  We have hundreds of sites so we ended up spending weeks patching any holes we could find.  Then a few weeks ago we started getting hit again.  We've gone through everything we can think of and we can't find anywhere where the person is getting in.  Does anyone know if there's a way to write a script for IIS that will allow me to record every url or posted data that IIS encounters?  And because we've got so many sites I'm looking to set up something that doesn't have to be set up for each individual site but that I can set up at the root of the IIS tree.  Thanks.</p>