Announcement

Collapse
No announcement yet.

is this MySQL behaviour suspicious ?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • is this MySQL behaviour suspicious ?

    I received the following error report and wondered whether I should be concerned? (I'm somewhat paranoid after having 2 vBulletin 4 sites hacked last year!)

    The query was performed by an unregistered user.


    Database error in vBulletin 4.2.2:

    Invalid SQL:

    SELECT thread.forumid, thread.threadid, thread.title, thread.lastpost, thread.lastpostid, thread.lastposter, thread.iconid, user.userid
    FROM thread AS thread
    LEFT JOIN user AS user ON (user.username = thread.lastposter)
    WHERE threadid>0 AND visible=1 AND open!=10 AND forumid IN(399,403,-1) AND forumid NOT IN(407,,357)
    ORDER BY lastpost DESC
    LIMIT 0, 3;

    MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '357)
    ORDER BY lastpost DESC
    ' at line 4
    Error Number : 1064

    Last edited by kjh411; Tue 18th Mar '14, 1:11pm. Reason: corrected typo in thread title

  • #2
    Not really suspicious. What were you doing when you when you received the error. The URL is missing from the error.
    Translations provided by Google.

    Wayne Luke
    The Rabid Badger - a vBulletin Cloud customization and demonstration site.
    vBulletin 5 Documentation - Updated every Friday. Report issues here.
    vBulletin 5 API - Full / Mobile
    I am not currently available for vB Messenger Chats.

    Comment


    • #3
      I wasn't doing anything!

      The URL associated with the error is http://www.domain.com.au/forum/?f=29

      PS. had several more of them today
      Last edited by kjh411; Thu 20th Mar '14, 8:41pm. Reason: PS

      Comment


      • #4
        I could not find that exact query in the 4.2.2 code. Try disabling your modifications/plugins and see if you still have this problem.
        Note: To temporarily disable the plugin system, edit includes/config.php and add this line right under <?php

        PHP Code:
        define('DISABLE_HOOKS'true); 

        Please don't PM or VM me for support - I only help out in the threads.
        vBulletin Manual & vBulletin 4.0 Code Documentation (API)
        Want help modifying your vbulletin forum? Head on over to vbulletin.org
        If I post CSS and you don't know where it goes, throw it into the additional.css template.

        W3Schools &lt;- awesome site for html/css help

        Comment

        widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
        Working...
        X