Topic: Error bursts

[Sir Osis of Liver]

Seeing this again, different forum, different errors than previously.  Server logged 10.6 mb errors in two seconds this a.m., same thing last night around 23:00.  Starts with a lot of these -

Code: [Select]


[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: is_admin in /home/freeadzf/public_html/Sources/Security.php on line 824
[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: permissions in /home/freeadzf/public_html/Sources/Security.php on line 831
[13-Oct-2020 07:00:52 America/New_York] PHP Warning:  in_array() expects parameter 2 to be array, null given in /home/freeadzf/public_html/Sources/Security.php on line 831
[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: is_admin in /home/freeadzf/public_html/Sources/Security.php on line 824
[13-Oct-2020 07:00:52 America/New_York] PHP Notice:  Undefined index: permissions in /home/freeadzf/public_html/Sources/Security.php on line 831


Ends with a lot of these -

Code: [Select]


Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_offset in /home/freeadzf/public_html/Sources/Subs.php on line 861
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 777
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 778
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 778
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 780
[13-Oct-2020 07:00:54 America/New_York] PHP Notice:  Undefined index: time_format in /home/freeadzf/public_html/Sources/Subs.php on line 795


Server error_log was over 42 gb yesterday when they reported problems with the forum.  Deleted it last night, two error bursts since.  Forum is currently logging just a few errors, mostly from mods.  Any way to determine which scheduled task is causing this?

[shawnb61]

Hmmm...Don’t think I’ve seen those before.  Not sure they’re tied to scheduled tasks.

I would compare time stamps on the scheduled task log to the time stamps of the error.  I would also look closely at the web access logs during that time for the corresponding activity.

[Arantor]

Bet you it’s the daily notifications digest.

[Sir Osis of Liver]

This is interesting -

Code: [Select]


Today at 07:00:54 AM
Type of error: Template
https://www.freeadzforum.com/index.php?topic=101043.0%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23
Apply Filter: Only show the errors with the same message
Unable to load the 'WIRELESS_PROTOCOL_above' template.


Today at 07:00:52 AM
Type of error: Database
https://www.freeadzforum.com/index.php?topic=101043.0%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23
Database Error: Table 'freeadzf_smf1.smf_pretty_topic_urls' doesn't exist
File: /home/freeadzf/public_html/Sources/QueryString.php
Line: 266


Pretty urls had been uninstalled at some point, but left a lot of code in QueryString.php.  Will see If I can clean it up.