EMERGENCY--Site won't let me post!!!!!! Pleaes help!!!!!!

wynnyelle · February 04, 2012, 05:20:15 AM

It just hangs up whenever I try!!!! I don't know what happened, I didn't do anything!!!!!!

Pleaes help!!!

Storman™ · February 04, 2012, 05:31:37 AM

Have you looked in your error log ?

wynnyelle · February 04, 2012, 05:37:45 AM

it isn't letting....the site hangs up ;_;

it is getting worse and i have done nothing!!!!

nobody able to post for over a half hour now and my host isnt responding to my please for his help

now whole site is down and no reason for it!!!!!!!

wynnyelle · February 04, 2012, 05:49:44 AM

to K@:

PMs locked me out again.

Cpanel is working fine. Site isn't. This is not Dallas data centre this is my site.

Storman™ · February 04, 2012, 05:52:47 AM

Are you able to see CPU and memory loads in your CPanel ?

wynnyelle · February 04, 2012, 05:53:50 AM

thank you so much for responding nobody else is now....

...where do i go to look at that in cpanel?

i dont know....... please can you help,,please...

Storman™ · February 04, 2012, 05:58:17 AM

Quote...where do i go to look at that in cpanel? i dont know....... please can you help,,please..

I don't personally use use cpanel so not sure where's it's located.

Give me a few minutes, I'll see if I can get access to one that I can look at.

wynnyelle · February 04, 2012, 05:59:24 AM

please thank you im just crying righ tnow i need so much help ;_; i will be here...this is desperate, an emergency please....i dont know whats wrongm, the site is quiet at this time it cant just be traffic....

wynnyelle · February 04, 2012, 06:01:20 AM

i found the error log, nothing is unsuual at all on the forum errror log. it just wont leet anyone post at all and is usually down totally!! This is in the SERVER. I need immeiate help!!

wynnyelle · February 04, 2012, 06:03:48 AM

please is coreISP here i need help from him he would be able to help me ;_; he would know. where is he does anyone have hs number?

Storman™ · February 04, 2012, 06:05:27 AM

Ok in the panel down the left hand side of Cpanel there is a section called stats.

Click on "expand stats" at the bottom

Then go to the bottom again and click on "service status"

You should now be able to see your memory and cpu loads

It would be good to know which one is high (CPU or memory or both)

NanoSector · February 04, 2012, 06:06:12 AM

Did you install any mods before this happened?

wynnyelle · February 04, 2012, 06:09:02 AM

No i installed nothing!!!! I was not even in there at all today!!!

in the expand, i got this

Quote
cpsrvd    up
ftpd    up
httpd (2.2.21 (Unix))    failed
lfd    up
named    up
imap    up
Server Load    2.96 (16 cpus)
Memory Used    35 %
Swap Used    0 %
Disk /dev/sda5 (/)    22 %
Disk /home/warrior (/home/warrior)    22 %
Disk /dev/sda1 (/boot)    12 %
Disk /dev/sda3 (/tmp)    9 %

NanoSector · February 04, 2012, 06:13:26 AM

Quote from: Groovystar on February 04, 2012, 06:09:02 AM
No i installed nothing!!!! I was not even in there at all today!!!

in the expand, i got this

Quote
cpsrvd    up
ftpd    up
httpd (2.2.21 (Unix))    failed
lfd    up
named    up
imap    up
Server Load    2.96 (16 cpus)
Memory Used    35 %
Swap Used    0 %
Disk /dev/sda5 (/)    22 %
Disk /home/warrior (/home/warrior)    22 %
Disk /dev/sda1 (/boot)    12 %
Disk /dev/sda3 (/tmp)    9 %

Quotehttpd (2.2.21 (Unix)) failed

Wait, so your web server has failed?

Ehm, are you still able to connect to your site and do other stuff?
EDIT: Nope, just read your other posts.
There's nothing you can do now except for asking your host to restart HTTPD or the whole server.

Storman™ · February 04, 2012, 06:15:09 AM

As Yoshi says, httpd has died.

It probably needs a restart (hopefully only a restart). However, even if you have SSH access I'd be wary of talking you through it if you are not sure what to do as it could mess up big time if done incorrectly.

Personally in your situation I would report this to your host and get them to help.

NanoSector · February 04, 2012, 06:17:18 AM

Quote from: Storman on February 04, 2012, 06:15:09 AM
As Yoshi says, httpd has died.

It probably needs a restart (hopefully only a restart). However, even if you have SSH access I'd be wary of talking you through it if you are not sure what to do as it could mess up big time if done incorrectly.

Personally in your situation I would report this to your host and get them to help.

Yup, I'd suggest asking them to restart HTTPD first, then if it happens again ask them to restart the whole machine to start fresh.

Also, the server load is quite high. Ask your host about what caused that.

wynnyelle · February 04, 2012, 06:18:54 AM

It somehow started up and is green again and the site seems normal again.

All this time I was submitting tickets to my host and they never responded once. If this was them restarting, they didn't tell me. However, from now on, if this happens again I'd like to be able to handle it myself rather than run around like a headless chicken. I would like to know the cause--what could have caused this? The error log showed no unusual activity, no DDOS because the site was up for a while just people couldn't post, but it was otherwise browsable. And it resolved all of a sudden like nothing happened, something else a DDOS does not do.

There was no apparent cron job running though I did see this in the cpanel error log:

Quote
[Sat Feb 04 02:23:49 2012] [error] [client 66.249.71.117] PHP Fatal error: require_once() [<a href='function.require'>function.require</a>]: Failed opening required '/home/warrior/public_html/Sources/Subs-RSS2.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/warrior/public_html/cronrss.php on line 14
[Sat Feb 04 02:23:49 2012] [error] [client 66.249.71.117] PHP Warning: require_once(/home/warrior/public_html/Sources/Subs-RSS2.php) [<a href='function.require-once'>function.require-once</a>]: failed to open stream: No such file or directory in /home/warrior/public_html/cronrss.php on line 14
[Fri Feb 03 23:27:12 2012] [error] [client 122.59.212.79] PHP Fatal error: Maximum execution time of 30 seconds exceeded in /home/warrior/public_html/Sources/Subs-Db-mysql.php on line 329, referer: http://warriorcatsrpg.com/index.php?action=register
[Fri Feb 03 22:53:44 2012] [error] [client 72.213.143.107] PHP Fatal error: Maximum execution time of 30 seconds exceeded in /home/warrior/public_html/Sources/Subs-Db-mysql.php on line 329, referer: http://warriorcatsrpg.com/index.php/topic,356057.0.html

most recent errors. I honestly don't know what could have done this and I need answers. I do want to thank the people here for being the ones who did come through, communicate with me and made a sincere effort to help me. But this isn't over just because the site's back up. I need answers, I need to know what the hell happened.

French · February 04, 2012, 06:25:08 AM

Quotehttpd (2.2.21 (Unix)) failed

Your server may overloaded,Maybe a restart httpd will help ask your provider.

wynnyelle · February 04, 2012, 06:27:21 AM

It's up again now. But the server overloading right now makes NO sense. The site was at the nadir of its 24-hour activity cycle. Almost nobody was on--at the most maybe 10 or 15 people were on. The server could not have picked a less likely time to overload if it tried.

I scooped up the WHM process log's contents and showed my host them as well. Waiting on a response still.

floridaflatlander · February 04, 2012, 07:26:37 AM

Quote from: Groovystar on February 04, 2012, 06:18:54 AM
I would like to know the cause--what could have caused this?

Me too, I've been following this(just in case something like this happens to me) and if you find out can you post an update? Thanks

Illori · February 04, 2012, 07:31:51 AM

i really doubt we will find out why it happened, and given that groovystar has a dedicated server it could be related to packages installed and such, there is no way to know if what happened to one user on their server could happen to another on their server. also i doubt that your forum is as large as theirs and i doubt that you have nginx setup on your server which may or may not have had anything to do with this.

wynnyelle · February 04, 2012, 07:43:05 AM

My host will almost certainly have some clue, at least that's what I am hoping. I can't imagine that an hour and a half crash out of nowhere, with no traffic apparently causing it, wouldn't leave any kind of trail.

I will mark this solved for now though so it doesn't distract people from those with an acute problem, since at this point what I really need is on the side of my host.

Thank you everyone, and you can keep posting here if you like, I will post updates for those of you interested.

Storman™ · February 04, 2012, 08:28:25 AM

The cause could be a number of things and it might not be directly related to your actual smf site.

Things like your email, a spam checker like spam assassin, a badly written script that loops, an smf mod, large search queries, even an adjacent website on your server (depends on your hosting arrangement). I've even see a spellchecker bring down httpd.

Have you got access to these:

/usr/local/apache/logs or /etc/httpd/logs

If so, have rumage in there

Otherwise you'll need to learn some linux shell commands (SSH) in order to check a few things (that's if your hosting arrangements allows it). However, if you've got SSH access then be very careful as you are essentially messing with the soul of your site and it could be messed up big time if you get it wrong. Unfortunately though, that's probably beyond the scope of this forum section as you'd be entering a brave new world. I would still wait to see what your hosts says when you get a response from them. They might even set some monitoring up for you. Of course the problem may well be a one off and it might never happen again.

wynnyelle · February 04, 2012, 08:31:29 AM

Trust me--if it is on my site, it is not a one off.

Thank you for the beginning instructions, but it is best I not get into that myself, I can already tell it is beyond my ability.

kat · February 04, 2012, 08:41:45 AM

I think there may have been a simple DNS problem.

FTP was OK, so it only affected html.

kat · February 04, 2012, 09:21:03 AM

Quote[Sat Feb 04 02:23:49 2012] [error] [client 66.249.71.117] PHP Fatal error: require_once() [<a href='function.require'>function.require</a>]: Failed opening required '/home/warrior/public_html/Sources/Subs-RSS2.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/warrior/public_html/cronrss.php on line 14

That bit's correct. Those files don't exist.

Looking at it, it's part of the "RSS Feed Poster" mod.

I've put that file and Subs-RSS.php into the "Sources" directory, for you.

That should stop that error, at least.

Illori · February 04, 2012, 09:28:50 AM

the reason it only affected html was because the webserver crashed K@, but the pages were still being served by nginx.

wynnyelle · February 04, 2012, 09:29:43 AM

That mod was removed. We aren't using it and never actually did use it....

Illori · February 04, 2012, 09:31:09 AM

then if that cronrss file exists on your server it needs to be removed.

kat · February 04, 2012, 09:33:55 AM

I'll delete it.

I'll keep a copy of it, just in case. That mod's still in Packages, along with **sigh** PrettyURLs, prettyurls-extras and prettyurls-reverter.

kat · February 04, 2012, 09:36:47 AM

OK. It's gone. If it causes hassles, gimme a squeak and I can stick it back.

After all, something must be trying to use it, or the error wouldn't be appearing.

wynnyelle · February 04, 2012, 09:38:41 AM

Thanks, but how would anything on my site still be trying to reference it if it is truly gone?

kat · February 04, 2012, 09:39:55 AM

That's what I meant by "After all, something must be trying to use it, or the error wouldn't be appearing."

kat · February 04, 2012, 09:44:25 AM

Just noticed something...

You have error logs that are bigger than my entire site!

error_log_httpd is 280-odd meg and error_log_mysql is 275 meg.

I'll have a look at them, to see if they tell us anything useful.

Might take a few months to download, though...

NanoSector · February 04, 2012, 09:47:24 AM

Quote from: K@ on February 04, 2012, 09:44:25 AM
Just noticed something...

You have error logs that are bigger than my entire site!

error_log_httpd is 280-odd meg and error_log_mysql is 275 meg.

I'll have a look at them, to see if they tell us anything useful.

Might take a few months to download, though...

That is quite a lot..

If you give me a link or access, I can download it here and post the weird stuff I see as I have quite a high speed connection (speedtest.net reported 115 MB/s download speed)

kat · February 04, 2012, 09:50:48 AM

There are a few zillion entries just for today!

Hang on and I'll let you 'ave 'em...

kat · February 04, 2012, 09:53:02 AM

-edit-
snip

NanoSector · February 04, 2012, 10:05:32 AM

Thanks, I'll grab 'em for ya. Hang on for a second.

NanoSector · February 04, 2012, 10:10:26 AM

Okay, this looks weird:

[Sat Feb 04 06:33:52 2012] [error] [client 95.35.63.173] File does not exist: /usr/local/apache/htdocs/~shamcaf, referer: http://www.roro30.com/vb/showthread.php?t=32595

* Yoshi2889 clicks the link with 2 anti-virus and anti-malware programs ready

Oh and there's LOTS of entries from this little guy:
[error] [client 92.237.36.91] invalid request-URI
I'd suggest blocking the bot/guy/whatever.

EDIT: Yesterday it was this guy:
[client 70.142.43.146] invalid request-URI

But anyway, I'm off searching for some serious errors. You can clear your error logs if you want to, I have 'em here.

EDIT2: Euh, some guys are reffering to a weird address:
/usr/local/apache/htdocs/~shamcaf, referer: http://www.sham-cafe.net/vb/showthread.php?t=12405

Lots of Maximum Execution Time Exceeded errors...
May I ask what mods you have installed?

kat · February 04, 2012, 10:30:29 AM

1. WYSIWYG Quick Reply    2.1    [ Uninstall ] [ List Files ] [ Delete ]
2.   SMFShop    3.1.6.1    [ Uninstall ] [ List Files ] [ Delete ]
3.   Global Headers Footers    2.0    [ Uninstall ] [ List Files ] [ Delete ]
4.   Sitemap    2.1.2    [ Uninstall ] [ List Files ] [ Delete ]
5.   Bookmarks    2.3    [ Uninstall ] [ List Files ] [ Delete ]
6.   Spoiler Tag    0.7.2    [ Uninstall ] [ List Files ] [ Delete ]
7.   PM to New Members    1.2    [ Install Mod ] [ List Files ] [ Delete ]
8.   Default Avatar    2.1    [ List Files ] [ Delete ]
9.   SMF Multi Quote    1.1.2    [ Uninstall ] [ List Files ] [ Delete ]
10.   Post Template Mod    0.1.3    [ Uninstall ] [ List Files ] [ Delete ]
11.   SA Shop    0.4.7    [ Install Mod ] [ List Files ] [ Delete ]
12.   Switch Permissions    1.0    [ Uninstall ] [ List Files ] [ Delete ]
13.   Member Awards    2.2.1    [ Uninstall ] [ List Files ] [ Delete ]
14.   Pretty URLs Extras    1.0    [ Install Mod ] [ List Files ] [ Delete ]
15.   SubAccounts Mod    1.0.1    [ List Files ] [ Delete ]
16.   Double Post Stopper    1.1    [ Uninstall ] [ List Files ] [ Delete ]
17.   Pretty URLs    1.0RC2a    [ Install Mod ] [ List Files ] [ Delete ]
18.   Pretty URLs Reverter    1.0    [ Install Mod ] [ List Files ] [ Delete ]
19.   Ignore Topics    1.0    [ Install Mod ] [ List Files ] [ Delete ]
20.   SMF Staff Page    1.7    [ Uninstall ] [ List Files ] [ Delete ]
21.   SimpleSEF    1.1    [ List Files ] [ Delete ]
22.   Subaccount Shop    1.0    [ Uninstall ] [ List Files ] [ Delete ]
23.   Curve_centered_menu    1.1    [ Install Mod ] [ List Files ] [ Delete ]
24.   YouTube BBCode    2.6    [ Uninstall ] [ List Files ] [ Delete ]
25.   SimpleAds    1.0.1    [ Uninstall ] [ List Files ] [ Delete ]
26.   Install & Uninstall Mods Quickly    1.3    [ Uninstall ] [ List Files ] [ Delete ]
27.   RSS Feed Poster    2.2    [ Install Mod ] [ List Files ] [ Delete ]
28.   SMF Member Color Link (SMF 2.0 RC4)    1.0    [ List Files ] [ Delete ]
29.   Justify BBCode    2.3.1    [ Uninstall ] [ List Files ] [ Delete ]
30.   Ultimate Profile    0.9.1    [ Uninstall ] [ List Files ] [ Delete ]

NanoSector · February 04, 2012, 10:33:05 AM

Quote from: K@ on February 04, 2012, 10:30:29 AM
1. WYSIWYG Quick Reply    2.1    [ Uninstall ] [ List Files ] [ Delete ]
2.   SMFShop    3.1.6.1    [ Uninstall ] [ List Files ] [ Delete ]
3.   Global Headers Footers    2.0    [ Uninstall ] [ List Files ] [ Delete ]
4.   Sitemap    2.1.2    [ Uninstall ] [ List Files ] [ Delete ]
5.   Bookmarks    2.3    [ Uninstall ] [ List Files ] [ Delete ]
6.   Spoiler Tag    0.7.2    [ Uninstall ] [ List Files ] [ Delete ]
8.   Default Avatar    2.1    [ List Files ] [ Delete ]
9.   SMF Multi Quote    1.1.2    [ Uninstall ] [ List Files ] [ Delete ]
10.   Post Template Mod    0.1.3    [ Uninstall ] [ List Files ] [ Delete ]
12.   Switch Permissions    1.0    [ Uninstall ] [ List Files ] [ Delete ]
13.   Member Awards    2.2.1    [ Uninstall ] [ List Files ] [ Delete ]
15.   SubAccounts Mod    1.0.1    [ List Files ] [ Delete ]
16.   Double Post Stopper    1.1    [ Uninstall ] [ List Files ] [ Delete ]
20.   SMF Staff Page    1.7    [ Uninstall ] [ List Files ] [ Delete ]
21.   SimpleSEF    1.1    [ List Files ] [ Delete ]
22.   Subaccount Shop    1.0    [ Uninstall ] [ List Files ] [ Delete ]
24.   YouTube BBCode    2.6    [ Uninstall ] [ List Files ] [ Delete ]
25.   SimpleAds    1.0.1    [ Uninstall ] [ List Files ] [ Delete ]
26.   Install & Uninstall Mods Quickly    1.3    [ Uninstall ] [ List Files ] [ Delete ]
28.   SMF Member Color Link (SMF 2.0 RC4)    1.0    [ List Files ] [ Delete ]
29.   Justify BBCode    2.3.1    [ Uninstall ] [ List Files ] [ Delete ]
30.   Ultimate Profile    0.9.1    [ Uninstall ] [ List Files ] [ Delete ]

Right, filtered mods that aren't installed.

I see SimpleSEF. Is that one installed?

kat · February 04, 2012, 10:42:43 AM

I believe it's been uninstalled, coz it was causing BIG problems. Quite how well it's been removed, though, I don't know.

NanoSector · February 04, 2012, 10:45:55 AM

Quote from: K@ on February 04, 2012, 10:42:43 AM
I believe it's been uninstalled, coz it was causing BIG problems. Quite how well it's been removed, though, I don't know.

That's why I asked

Anyway, I took a look at the mysql errors.
[Thu Jan 12 15:08:17 2012] [error] [client 99.247.210.177] PHP Fatal error: Maximum execution time of 30 seconds exceeded in /home/warrior/public_html/Sources/Subs-Db-mysql.php on line 329, referer: http://warriorcatsrpg.com/unreadreplies/
And LOTS of "mysql_real_escape_string()" errors.

I don't think you like my suggestion, and I don't either, but my guess is to just start testing with fresh files.
Heck, setting up a test forum doesn't mind anyway.

Take a backup of your files as they are now.
Then, take a breath, download the Large Upgrade package, unzip, upload it (without the upgrade files) and test that for a few days. Just fresh. Nothing installed. Only data.

Illori · February 04, 2012, 10:47:39 AM

i think for errors like that either her host or coreisp should take a look at the server configuration and see what may be needed to be changed.

LiroyvH · February 04, 2012, 11:04:18 AM

Oh i'm analyzing the logs already.
Actually, that access_log you see is not the real one. The real one is 4.1GB in size.

kat · February 04, 2012, 11:08:16 AM

4.1 GIG!!!

Storman™ · February 04, 2012, 11:34:23 AM

I pop out for a while, come back, and you guys are in total website rebuild mode lol

Good to see it getting sorted - cheers

wynnyelle · February 05, 2012, 12:49:05 AM

Thanks guys. You rock.

Seems like we're just sitting down having a few cold ones over this. Actually, we already have a test site, or..two of them. The idea is yes, to get the whole thing recoded and import the tables. That's the goal. What makes it hard is how much extra stuff's been engineered into the site, and I use the word engineered lightly. The code work done was of varying quality, mostly good quality, but not done all together so it was sort of patchwork.

The biggest issues seem to come from the coloured names, a popular feature on our site; those will need a recode.

i was informed that last night's down time was due to a DDOS attack. That'd be IMO a pretty straightforward problem and solution, and Ihad to ask though, if that's what it was, why was only posting disabled for most of it and that the site was othewise loading normally, most of the time?

NanoSector · February 05, 2012, 05:09:40 AM

My guess is that either the httpd server or the MySQL server couldn't handle everything happening.
Most likely the MySQL server already had lots of load on it and couldn't cope with the posting anymore.
Just my guess though, it's possible I'm wrong all the way around

wynnyelle · February 05, 2012, 05:26:35 PM

That would make sense except it was the lowest traffic time of the day. About 5 am on my time. Very few members were on.

NanoSector · February 06, 2012, 02:35:27 PM

Quote from: Groovystar on February 05, 2012, 05:26:35 PM
That would make sense except it was the lowest traffic time of the day. About 5 am on my time. Very few members were on.

I dunno then. Maybe something else was going on at that time of the day.

wynnyelle · February 06, 2012, 02:49:01 PM

We're looking into it. So far we still don't know.

News:

EMERGENCY--Site won't let me post!!!!!! Pleaes help!!!!!!

French

kat

kat

kat

kat

kat

kat

kat

kat

kat

kat

kat