Just need to understand what triggered this error

jdeveaux · October 22nd, 2012, 08:16 AM

I'm not sure what triggered this error but I received 2000 of them all at once then they stopped. My guess is someone attempting a bulk up load but would like to verify.

Quote:

Originally Posted by "SQL ERROR

An error was encountered during execution of the query:

SELECT maximages,extra1,extra2,extra3,extra4,extra5,extra6,numextra FROM pp_categories where id=500 and 1=2 union select 1,2,3,4,5,6,7,if(ascii(substring((SELECT concat(a.userid,0x3a,u.password,0x3a,hex(u.salt)) FROM vb_administrator a left join vb_user u using(userid) limit 2,1),73,1)) between 94 and 128,1,(select 1 union select 2))--

The query returned with an errorcode of:

Subquery returns more than 1 row

If you need assistence or feel this is a 'bug'; please report it to our support forums at:

To turn off these emails, set $debug=0 in your config-inc.php file.

Chuck S · October 22nd, 2012, 08:40 AM

Someone trying to hack into something looks like.

Maybe at the top of uploadphoto.php this line

Code:

Content visible to verified customers only.

change it to this

Code:

Content visible to verified customers only.

Chuck S · October 23rd, 2012, 01:53 PM

That line will set the category to the default members gallery if you do not select a category which it does but it also checks that if $category is not an integer then the only possible variation it can be is notcat which is permissible as that is the value for any category you set that can not contain images.