Have some weird issues going on. Zombie threads? Help!

[blogger419]

For some reason certain threads are disappearing from my forum. They aren't being deleted, but they are being removed from display. However, I've discovered that I can get them to show up again simply by posting in them. Another weird thing that has been happening is that under "Last Post" on the board index it will show up blank from time to time for particular boards, despite there having been new posts over the last few hours. Also, I've been getting a lot of errors when I run the find and repair tool.

I get this error in the zombie threads though when I post to them, even though they've been posted in as recently as the previous day:

Warning: this topic has not been posted in for at least 120 days.

Any idea what is going on here? I just performed updated to 2.10, and ran recount stats and totals which I think helped. But I would like to get a better answer as it's concerning to have threads randomly disappearing.

[Kindred]

mod installed?

URL?

[blogger419]

These are the installed mods:

I don't see anything in the error logs, that would explain this.

1.    Dream Portal    1.1    [ Uninstall ] [ List Files ] [ Delete ]
2.    Simple Audio Video Embedder    2.5.1    [ Upgrade ] [ List Files ] [ Delete ]
3.    Optimus Brave    1.8.7    [ Uninstall ] [ List Files ] [ Delete ]
4.    Simple Audio Video Embedder    2.3    [ Upgrade ] [ List Files ] [ Delete ]
5.    SMF 1.1.21 / 2.0.10 Update    1.0    [ Uninstall ] [ List Files ] [ Delete ]
6.    SMF Gallery Pro - Video AddOn    4.0.1    [ Uninstall ] [ List Files ] [ Delete ]
7.    SMF 2.0.8 Update    1.0    [ List Files ] [ Delete ]
8.    Ad Managment    3.0.1    [ Uninstall ] [ List Files ] [ Delete ]
9.    SMFPacks WYSIWYG Editor    2.0.3    [ Install Mod ] [ List Files ] [ Delete ]
10.    SMFPacks Attachments Center Pro    1.0    [ Uninstall ] [ List Files ] [ Delete ]
11.    Global Headers Footers    2.0.1    [ Uninstall ] [ List Files ] [ Delete ]
12.    SMF Gallery Pro    6.5.2    [ Uninstall ] [ List Files ] [ Delete ]
13.    Drop Guest Email Requirement In Posting    1.0.1    [ Uninstall ] [ List Files ] [ Delete ]
14.    SMFPacks Likes Pro Mod    1.3.8    [ Uninstall ] [ List Files ] [ Delete ]
15.    Force Topic Read On Login Mod    2.1    [ Uninstall ] [ List Files ] [ Delete ]
16.    SMF 1.1.20 / 2.0.9 Update    1.0    [ List Files ] [ Delete ]
17.    ShowBannedMessage    1.3    [ Uninstall ] [ List Files ] [ Delete ]
18.    SMF 1.1.19 / 2.0.6 Update    1.0    [ List Files ] [ Delete ]
19.    Pretty URLs    1.0    [ Uninstall ] [ List Files ] [ Delete ]
20.    Simple Audio Video Embedder    3.1    [ Uninstall ] [ List Files ] [ Delete ]
21.    Registered Links    3.0    [ Uninstall ] [ List Files ] [ Delete ]
22.    SMF 2.0.7 Update    1.0    [ List Files ] [ Delete ]
23.    Add Facebook Like, Tweet, and Google +1    1.0.3a    [ Uninstall ] [ List Files ] [ Delete ]
24.    No Download Attachment    1.0    [ Uninstall ] [ List Files ] [ Delete ]
25.    SMF 2.0.5 Update    1.0    [ List Files ] [ Delete ]
26.    Simple Image Upload    1.4.0    [ Uninstall ] [ List Files ] [ Delete ]
27.    Login Security    1.0.2.2    [ Uninstall ] [ List Files ] [ Delete ]
28.    KeyCAPTCHA for SMF    2.5    [ List Files ] [ Delete ]
29.    Annoy User    1.2.4    [ Uninstall ] [ List Files ] [ Delete ]
30.    Embed BBCode    2.0    [ Uninstall ] [ List Files ] [ Delete ]
31.    Forum Firewall    1.1.6    [ Uninstall ] [ List Files ] [ Delete ]
32.    Country Flags    2.1    [ Uninstall ] [ List Files ] [ Delete ]
33.    Google Analytics Code    1.4    [ Uninstall ] [ List Files ] [ Delete ]

[Kindred]

URL?

[blogger419]

URL?

I am hesitant to post the URL as it is an adult forum. Have you ever heard of this issue before? Things appear to be working properly now, but I am still missing a few threads.  For one in particular I get "
This topic doesn't exist on this board."  even though I didn't remove it, nor was it deleted.

[Kindred]

from your description, it sounds like time/date stamps were/are getting confused.

Are you on a shared server?

[blogger419]

No, private VPS. Another weird issue is that posts show up in the post history for some users, but when you try to actually go to the topic it says error topic doesn't exist. How would I address the time/date issue? I'd also add that the time listed on the forum is correct.

[Kindred]

I honestly have no idea...

none of the mods in that list should be affecting things like that...

but you might try loading a clean set of files (backup first)
see if that fixes things
if so, reinstall the mods one by one...

if not, restore the backup with nothing but a little time wasted

[blogger419]

I just noticed that one of the topics that "doesn't exist" still resides in the database. Any ideas on how to get it to show up?

Edit: I've attached screenshot of the topic in the database. Again, it's in there but it's simply not showing. I checked the permissions and they appear to be okay.

[blogger419]

It looks like my subs.php is version 2.0.8 while my forum is 2.10. Could that be an issue?

I am also getting this error from time to time: "8: Undefined index:"

From MessageIndex.Template.php around lines 270 - 279

It appears it might have something to do with time. For some reason it thinks the zombie posts are more that 120 days old when really they've been posted in everyday. Another issue point might be that one of the mods moved a bunch of threads around, which I've heard can mess up the post and thread counts.

[Steve]

It looks like my subs.php is version 2.0.8 while my forum is 2.10. Could that be an issue?

Doubtful. Mine is the same way.

[Sir Osis of Liver]

Another issue point might be that one of the mods moved a bunch of threads around, which I've heard can mess up the post and thread counts.

That's a really bad idea, and could cause the problems you've described.  Do you have a clean backup of your database?

[Steve]

Why is it a bad idea to move threads around? And wouldn't running a recount of statistics fix any post and thread count errors after having moved them?

[Illori]

moving topics from one board to another using the move topic option should not cause this issue. if so then more people would be complaining about topics going missing or breaking.

[Sir Osis of Liver]

moving topics from one board to another using the move topic option should not cause this issue. if so then more people would be complaining about topics going missing or breaking.

Agreed, if you're using the admin function, but having a mod do it could be problematic.

[Illori]

Agreed, if you're using the admin function, but having a mod do it could be problematic.

why? if you are using the move topic function that an admin AND a mod should use, it is not problematic at all. it is the same exact way to move topics if you are an admin or a mod. there is no other way to move a topic unless you do it in the database, that will cause problems.

[Gluz]

There is another way, with modifyPost function, that's how one of my mods used to modify things, then I realized that when I change the $topicOptions['board'] to feed the modifyPost function it generate this error of duplicated threads, then I have to add an extra IF to check if the $topicOptions['board'] was different then first move it to the final board and then modify the post.

[Kindred]

Gluz

that is the WRONG way to do it.

[Gluz]

That's why I have to use moveTopic before edit the content of the post, that way $topicOptions['board'] match and it doesn't move the post and then no duplicate topic is created, at least not in the time I have using that in my site.

[Steve]

Have we determined moving posts is the cause of the OP's problem?

[Illori]

Have we determined moving posts is the cause of the OP's problem?

i dont think it is possible without someone looking at their forum. as the forum is an adult forum the link has not been posted. it may also take someone looking at the database to see what exactly is going on with the topics that have problems.

[Steve]

Then we're straying from the OP's question which is kind of the point I was trying to make if someone confirmed it. (thanks Illori)

[Chas Large]

... Another issue point might be that one of the mods moved a bunch of threads around, which I've heard can mess up the post and thread counts.

Is it possible he means MODERATOR rather than ModIFICATION?

[blogger419]

I've performed a system restore to a few days prior to the problem showing up. Now things appear to be back to normal, however, it appears as though every one that was in the paid subscriptions group is no long a part of that group, despite it telling me that there a paid members. Any idea what could cause this?

[Sir Osis of Liver]

What and how did you restore?

[blogger419]

Getting a new error. Now members are disappearing:


messageThe database value you're trying to insert does not exist:
Function: MLAllApply Filter: Only show the errors from this file File: /home/admin/public_html/Sources/Memberlist.php
Line: 389

This is after having performed a server restore. Any idea what is going on?

[Kindred]

You obviously have some really badly installed or badly written mods...

[margarett]

Please attach that file, maybe it's possible to find the cause...

[blogger419]

You obviously have some really badly installed or badly written mods...

So how do I fix this? I don't want to loose my forum. Is there a way to simply start over and rebuild while keeping the database and attachments? I haven't installed anything new. I did move servers about two months ago. I am starting to wonder if the forum could be hacked as well. Only certain things seem to be disappearing.

[blogger419]

Please attach that file, maybe it's possible to find the cause...

Attatched.

[Kindred]

Read the FAQ article on loading a fresh set of files

[margarett]

Actually I don't see anything wrong with that file (apart from messed indentation and line inserts but that's not a problem)

Can you give the complete error log message?

[Sir Osis of Liver]

What and how did you restore?

[blogger419]

What and how did you restore?

I did a full server restore from an image.

[margarett]

Did you restore the complete VPS?
If that's the case, I can't understand why it happens... Your latest error (with search) suggests a missing field from the database, regarding the search query code. But if you restored everything, files and database should come together so they should tie together with the configuration they had when you created the image. It is possible that the error was already present, though.

About Paypal

despite it telling me that there a paid members

Most likely this is just the users primary group which came together with the database.

Since you own a VPS, you can do stuff more easily. I would suggest you to duplicate your database + files. In that copy, run repair_settings to point the database info + paths to it, and don't forget to choose to reset everyone to default theme.
Finally, load a fresh set of files in this copy according to the link Kindred gave you. Then see if the issues still exist.

[blogger419]

Did you restore the complete VPS?
If that's the case, I can't understand why it happens... Your latest error (with search) suggests a missing field from the database, regarding the search query code. But if you restored everything, files and database should come together so they should tie together with the configuration they had when you created the image. It is possible that the error was already present, though.

About Paypal

despite it telling me that there a paid members

Most likely this is just the users primary group which came together with the database.

Since you own a VPS, you can do stuff more easily. I would suggest you to duplicate your database + files. In that copy, run repair_settings to point the database info + paths to it, and don't forget to choose to reset everyone to default theme.
Finally, load a fresh set of files in this copy according to the link Kindred gave you. Then see if the issues still exist.

I recently added a malware scanning service and it found the same malicious edits to: Sources/Subs-System.php, ssi_examples_.php, Themes/default/ManageSearch.template_.php, Sources/ManageAds.php

Any idea of how an attacker could have gotten to these files?  It looks like the script that they used is sort of a swiss army knife of attacks. I can post the code in an attachment if you'd like to see it.

[Kindred]

What same "malicious edits"? This is the first time I recall seeing anything about malicious edits..

As for how someone could get in...

1- server side
2- are you running any other scripts on the server?
3- what mods are running, after the complete reset? (You did do a complete reset, didn't you?)
4- are you hung the same password on any other sites?

[Herman's Mixen]

i suggest after your VPS restore.. close down your running services as FTP / MySQL / Apache /Nginx

then first go tighten up your system wide security...

chown and chmod your apache home directorie(s) to the correct settings for example your home directory is /home/domain/user/httpdocs chmod 750 and chown to apporiate user/group

start to maintain and logging stuff

start your services when al is good...

then you can start fixing your SMF related stuff...

good start for your linux tutorials see a website as for example howtoforge...

[blogger419]

What same "malicious edits"? This is the first time I recall seeing anything about malicious edits..

As for how someone could get in...

1- server side
2- are you running any other scripts on the server?
3- what mods are running, after the complete reset? (You did do a complete reset, didn't you?)
4- are you hung the same password on any other sites?

Same as in it appears to be the same script in 4 different places. I just found them today. The VPS is dedicated to this site only, there shouldn't be any other scripts running. The same mods as listed above, I didn't remove any. By complete reset I mean that I re-imaged the sever with a early version. I have now changed all passwords related to the site. The DB and FTP passwords were diffrent though.