MYSQL Error with Version 8
 

Hello.

I'm getting a number of MYSQL Errors where the results are similar to this, but 'WHERE cat IN (' is a different cat.

$debug is set to 0 in the config-inc.php but I seem to get these anyway...

debug is not a variable in our config file has not been so in many years

The problem as I see it is you have opage in that query clause. The issue is though that is the most popular pal and the structure is like this

I do not see anywhere you can put that type of code in the formation of the qiuery it simply passes a cat variable if it exists.

How are you getting this error?

What do you mean how? When is this error being thrown? What actions cause it? or How do I receive it?

That is what I am asking your for more information. I do not see looking at the code how that action can take place.

I tried to check the config-inc.php and now I'm getting http error 500 and nothing is working. What are my support options?

Are you saying you tried editing your config file and corrupted it?

You would need to tell me exactly what you did for me to suggest a resolution.

I would suggest you take a clean known good config file and make sure you input all the proper information and upload it.

I got the gallery working again, but I received 2 errors that are the same as before (non-existent) columns in the where clause.

I completely removed all old files, and re-uploaded the new files.

I'm disabling the photopost pro plugin for vbulletin to see if that is the reason it's throwing the errors?

well where are you seeing these errors a url would help as stated before.

A community photo gallery - PhotoPost Photo Gallery

A community photo gallery - ReefTalk Gallery

As I posted that query is the highest rated pal and the two examples I am posting here are our latest code PhotoPost Pro 8.0

You can send ftp info url and admin login through the contact us link in our site header if you want me to look at your site.

I'm not getting that error when I browse anywhere. I don't even know if users are...

It's coming to my email.

I would suggest your debug error be set to DISPLAY ERRORS. That way if you track it down if your logged in as admin you get the full complete error script name etc.

Ok... Since I disabled the vbulletin plugin I haven't gotten any errors.

It could have been the query for forumhome? I changed the debug to display errors... so we'll see how that goes.

I'll keep you updated.

Thanks.

well like I said I did a search that query is only done in our app one place that I see.

I don't really know if that fixed it, as now I don't get emails for the errors.

Opening the adm-index page really hogs the system, as the database query with all of the statistics is very taxing on mysql. It literally slows down my entire site.

I removed the statistics pal from my gallery home, and the photopost plugin for vbulletin. Things seem better on the site. I'm re-enabling the emailing of errors, so that I can at least see if they're still happening.


From my statistics:

Current Version 8.0
Registered Users 199,407 Comments/Ratings 16,339
Image Space Used 55,562.4 mb Total Photos 143,968
Total disk space used by the DATA directory 66,842.42 mb
Number of Albums 3977 Photos in Albums 55156
Posts in Albums 2246
Awaiting Approval 0 Total Views 68,866,080

statistics can be taxing depending on the size of things sure.

I also removed the popular image pal, and the errors seem to have stopped.

Yes if your not showing the ratings pal then your not running that query.

I just disabled "Ratings Pal" as disabling the most popular photo didn't exactly stop the errors, although there were only 6 all day yesterday instead of a few hundred... Should I just edit the query so that it doesn't pull the wrong info into it?

Is the error in this line of code?

$queryz = ppmysql_query("SELECT numcom,rating,cat,id,title FROM {$Globals['pp_db_prefix']}photos $catquery ORDER BY rating DESC LIMIT {$Globals['mostpoppal']}", $link);

The problem is there is nothing wrong with the query.

The section of code we are talking about merely formats the $catquery variable and any of its children into that string. There is no point of injection.

Basically if cat is greater than 0 we check if it has children and apply children like so ,id,id etc

Are you telling me somewhere in your actual mysql database you have a child variable for a category as opage not a numeric identifier?

No. In the database, I only see numbers for categories.

yes and that is what I am stumped on here.

That is an internal function that has no outside user interaction. Basically it merely posts results from internal variables from your database etc to show highest rated images.