Messages posted by: LSander

For your general information:

Lately I've gotten some "Too many connections" messages, possibly prompted by the same hackers. One day there were 5-10 of 'em. So far, they're no trouble except for having to deal with the emailed error message.

Here's the latest one:

MySQL Error : Connection Error
Error Number: 1040 Too many connections
Date : Wed, October 26, 2005 07:07:56
IP : 61.104.162.214
Browser : Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Referer :
PHP Version : 4.3.10
OS : Linux
Server : Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_tsunami/2.0 mod_bwprotect/0.2 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.6b
Server Name : www.ussrankin.org

Got it. Thanks!

Oh damn! I forgot to remove the urls. Sorry.

Lou Sander

Here are some recent ones:

===============================
MySQL Error : Query Error
Error Number: 1064 You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Realy good site! Vist us: http://xxxxxxx.com/
Date : Mon, October 17, 2005 20:28:51
IP : 80.77.90.229
Browser : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Referer : http://www.ussrankin.org/guestbook/index.php?entry=100
PHP Version : 4.3.10
OS : Linux
Server : Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_tsunami/2.0 mod_bwprotect/0.2 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.6b
Server Name : www.ussrankin.org
===============================
MySQL Error : Query Error
Error Number: 1064 You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Realy good site! Vist us: http://xxxxxxx.com/ <a hr
Date : Mon, October 17, 2005 20:20:07
IP : 80.77.90.229
Browser : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Referer : http://www.ussrankin.org/guestbook/index.php?entry=100
PHP Version : 4.3.10
OS : Linux
Server : Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_tsunami/2.0 mod_bwprotect/0.2 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.6b
Server Name : www.ussrankin.org
===============================
MySQL Error : Query Error
Error Number: 1064 You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Realy good site! Vist us: http://xxxxxxx.com/ <a href=
Date : Mon, October 17, 2005 19:29:35
IP : 80.77.90.229
Browser : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Referer : http://www.ussrankin.org/guestbook/index.php?entry=70
PHP Version : 4.3.10
OS : Linux
Server : Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_tsunami/2.0 mod_bwprotect/0.2 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.6b
Server Name : www.ussrankin.org
===============================
MySQL Error : Query Error
Error Number: 1064 You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Realy good site! Vist us: http://xxxxxxxx.com/ &lt
Date : Mon, October 17, 2005 15:19:48
IP : 80.77.90.229
Browser : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Referer : http://www.ussrankin.org/guestbook/index.php?entry=10
PHP Version : 4.3.10
OS : Linux
Server : Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_tsunami/2.0 mod_bwprotect/0.2 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.6b
Server Name : www.ussrankin.org
===============================

Good info. Any idea what might be causing the errors? I'm speculating that it's a hacker attempting to get in.

I've been getting quite a few emails (5+ per day), the subject of which is Guestbook - Error, and which contain some technical reporting information that begins

MySQL Error : Query Error
Error Number: 1064 You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Realy good site! Vist us: http://dumb-spammers.com &lt ...

There are NOT any apparent spam posts to my guestbook, which is version 2.3.1 with the visual verification patch.

Do you have any ideas about what is going on? I imagine somebody is trying unsuccessfuly to hack my guestbook.

Louis Sander
Pittsburgh, Pennsylvania
USA

1) Just installed it. Works great, but if I enter the wrong 8-character string, I do NOT get an error message. I just go back to the message entry screen, and a number (not the one I entered) appears in the Image Verification response field. I DO get the right error message if I merely forget to enter an 8-character string.

2) Is there a way to shorten the Image Verification string to 4 characters?

Lou Sander
Pittsburgh, Pennsylvania
USA

Thanks!

I have HTML disabled, but hackers seem to be able to post links to my guestbook. This is new in the past few days. What's going on here?

http://www.ussrankin.org/guestbook/

It had been horribly hacked, and you helped unhack it. Then I did a lot of customization with your guidance.

Thanks! Our guestbook is at http://www.ussrankin.org/guestbook/

I try to delete the spam as soon as it gets posted.

Every few days I get somebody posting a message to my guestbook -- usually something like "Great site, keep up the good work."

These smell like hackers, but I don't know what they might be up to.

Any ideas?

It works! Thanks!!!

Previous fix about LANG["EmailAdminSubject"] didn't work.

First I replaced the stuff in quotes with my own stuff. Email subject was then "(no subject)"

Then I replaced the entire "LANG["EmailAdminSubject"]" with "My Own Stuff". Still got "(no subject)"

Correction: "received directly from aol" should be "received by AOL when sent directly there"