Re: logging the SQL scripts

Hi,

have a look at SQL trace. There are many ways to turn it on and off for your own user and for another user session and also you can set the level to enable the logging of bind variables and wait events. I have a paper that details probably mots of the ways to turn on trace. This is at http://www.petefinnigan.com/ramblings/how_to_trace.htm - also tae a look at a paper I write called "Detecting SQL Injection in Oracle" which describes various ways to extract the SQL sent from an application to the server. This can be found http://www.petefinnigan.com/orasec.htm - finally take a look at my tools page where there is a link to a tool called OCISPY that can be used to grab the SQL as its sent from an application to the server. If your application is JDBC then there is also a tool to do the same for that.
You can find these at http://www.petefinnigan.com/tools.htm

hth

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.