Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: Sir Osis of Liver on October 13, 2020, 04:43:59 PM

Title: Error bursts
Post by: Sir Osis of Liver on October 13, 2020, 04:43:59 PM
Seeing this again, different forum, different errors than previously.  Server logged 10.6 mb errors in two seconds this a.m., same thing last night around 23:00.  Starts with a lot of these -



[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: is_admin in /home/freeadzf/public_html/Sources/Security.php on line 824
[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: permissions in /home/freeadzf/public_html/Sources/Security.php on line 831
[13-Oct-2020 07:00:52 America/New_York] PHP Warning:  in_array() expects parameter 2 to be array, null given in /home/freeadzf/public_html/Sources/Security.php on line 831
[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: is_admin in /home/freeadzf/public_html/Sources/Security.php on line 824
[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: permissions in /home/freeadzf/public_html/Sources/Security.php on line 831



Ends with a lot of these -



Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_offset in /home/freeadzf/public_html/Sources/Subs.php on line 861
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 777
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 778
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 778
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 780
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 795



Server error_log was over 42 gb yesterday when they reported problems with the forum.  Deleted it last night, two error bursts since.  Forum is currently logging just a few errors, mostly from mods.  Any way to determine which scheduled task is causing this?
Title: Re: Error bursts
Post by: shawnb61 on October 13, 2020, 05:01:27 PM
Hmmm...Don't think I've seen those before.  Not sure they're tied to scheduled tasks.

I would compare time stamps on the scheduled task log to the time stamps of the error.  I would also look closely at the web access logs during that time for the corresponding activity.
Title: Re: Error bursts
Post by: Arantor on October 13, 2020, 05:02:21 PM
Bet you it's the daily notifications digest.
Title: Re: Error bursts
Post by: Sir Osis of Liver on October 13, 2020, 05:08:18 PM
This is interesting -



Today at 07:00:54 AM
Type of error: Template
https://www.freeadzforum.com/index.php?topic=101043.0%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23
Apply Filter: Only show the errors with the same message
Unable to load the 'WIRELESS_PROTOCOL_above' template.


Today at 07:00:52 AM
Type of error: Database
https://www.freeadzforum.com/index.php?topic=101043.0%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23
Database Error: Table 'freeadzf_smf1.smf_pretty_topic_urls' doesn't exist
File: /home/freeadzf/public_html/Sources/QueryString.php
Line: 266



Pretty urls had been uninstalled at some point, but left a lot of code in QueryString.php.  Will see If I can clean it up.