#5147 - Possible core site loading issue with hack attack handling
-
By PDStig
- Added
- 7 views
| Identifier | #5147 |
|---|---|
| Issue type | Minor issue (breaks specific functionality) |
| Title | Possible core site loading issue with hack attack handling |
| Status | Completed |
| Handling member | Chris Graham |
| Addon | General / Uncategorised |
| Description | Composr may be bailing out too soon when a hack attack is detected. This results in several different potential errors. Here are the ones I've seen so far:
* PHP Fatal error: Uncaught Error: Call to undefined function multi_lang_content() in /home/patricks/git/composr/sources/config.php:34 * PHP Fatal error: Uncaught Error: Class 'Tempcode' not found in /home/patricks/git/composr/sources/site.php:144 * PHP Fatal error: Uncaught Error: Call to undefined function get_self_url_easy() in /home/patricks/git/composr/sources/database.php:2141 |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
Stack trace:
#0 /home/patricks/git/composr/sources/global.php(255): init__config()
#1 /home/patricks/git/composr/sources/site.php(42): require_code('config')
#2 /home/patricks/git/composr/sources/global.php(255): init__site()
#3 /home/patricks/git/composr/sources/failure.php(621): require_code('site')
#4 /home/patricks/git/composr/sources/global2.php(1569): _log_hack_attack_and_exit('DODGY_GET_HACK', 'page', '<xsl:value-of s...')
#5 /home/patricks/git/composr/sources/input_filter.php(56): log_hack_attack_and_exit('DODGY_GET_HACK', 'page', '<xsl:value-of s...')
#6 /home/patricks/git/composr/sources/global2.php(2067): check_input_field_string('page', '<xsl:value-of s...', false, 4000)
#7 /home/patricks/git/composr/sources/caches.php(88): get_param_string('page', '')
#8 /home/patricks/git/composr/sources/global.php(255): init__caches()
#9 /home/patricks/git/composr/sources/global2.php(356): require in /home/patricks/git/composr/sources/config.php on line 34
---
[15-Dec-2022 00:12:31 UTC] PHP Fatal error: Uncaught Error: Class 'Tempcode' not found in /home/patricks/git/composr/sources/site.php:144
Stack trace:
#0 /home/patricks/git/composr/sources/failure.php(622): attach_to_screen_header('<meta name="rob...')
#1 /home/patricks/git/composr/sources/global2.php(1569): _log_hack_attack_and_exit('SCRIPT_URL_HACK...', 'javascript:aler...', '')
#2 /home/patricks/git/composr/sources/input_filter.php(49): log_hack_attack_and_exit('SCRIPT_URL_HACK...', 'javascript:aler...')
#3 /home/patricks/git/composr/sources/global2.php(2067): check_input_field_string('type', 'javascript:aler...', false, 3744)
#4 /home/patricks/git/composr/sources/site.php(774): get_param_string('type', NULL, 3744)
#5 /home/patricks/git/composr/sources/site.php(598): process_url_monikers()
#6 /home/patricks/git/composr/sources/site.php(114): do_site_prep()
#7 /home/patricks/git/composr/sources/global.php(255): init__site()
#8 /home/patricks/git/composr/sources/failure.php(621): require_code('site')
#9 /home/patricks/git/composr/sources/global2.php(1 in /home/patricks/git/composr/sources/site.php on line 144
---
14-Dec-2022 23:54:57 UTC] PHP Fatal error: Uncaught Error: Call to undefined function get_self_url_easy() in /home/patricks/git/composr/sources/database.php:2141
Stack trace:
#0 /home/patricks/git/composr/sources/database.php(1804): DatabaseConnector->_query('SELECT SUM(perc...', 1, 0, false, false, Array, '')
#1 /home/patricks/git/composr/sources/database.php(1698): DatabaseConnector->query_select('hackattack', Array, Array, '', 1, 0, false, Array)
#2 /home/patricks/git/composr/sources/failure.php(653): DatabaseConnector->query_select_value('hackattack', 'SUM(percentage_...', Array)
#3 /home/patricks/git/composr/sources/global2.php(1569): _log_hack_attack_and_exit('SCRIPT_URL_HACK...', 'javascript:aler...', '')
#4 /home/patricks/git/composr/sources/input_filter.php(49): log_hack_attack_and_exit('SCRIPT_URL_HACK...', 'javascript:aler...')
#5 /home/patricks/git/composr/sources/global2.php(2067): check_input_field_string('keep_su', 'javascript:aler...', false, 4000)
#6 /home/patricks/git/composr/sources/global.php(336) : eval()'d code(124): get_param_st in /home/patricks/git/composr/sources/database.php on line 2141