what if someone had access to my server and was sending queries, is there no way to catch what querys he's sending?

being that he created a php script so that loaded it can show him username/passwords or select from a table and show to the page.

__________________
no signature set