Sticky Invalid SQL

[sjoudi]

Hi;

2 months ago, I started receiving a lot of "vBulletin Database Error" emails originated from browseimage.php, claiming that there is an invalid SQL statement.

Below is the email content:

Database error in vBulletin 4.1.6:

Invalid SQL:

SELECT images.imageid
FROM ppgal_images AS images

WHERE valid = 1 AND images.catid = '11'
ORDER BY sticky DESC, , images.imageid
LIMIT;

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' images.imageid
LIMIT' at line 5
Error Number : 1064
Request Date : Monday, October 24th 2011 @ 04:26:20 AM
Error Date : Monday, October 24th 2011 @ 04:26:20 AM
Script : ............/gallery/browseimages.php?do=browseimages&c=11
Referrer :
IP Address : ...............
Username : ..................
Classname : vB_Database
MySQL Version :

Any suggestion please!

[Chuck S]

The problem with the query is your condition doorderby is empty note you have two ,, in the order statement.

Now the problem I see is why. How do you get that error can you replicate it? I have viewed many different conditions of browseimages and can not get an error so I need to know how your getting the issue.

Looking at the script all the different cases I see where we define the doorderby condition.

[sjoudi]

Hi Chuck;

I can't replicate the error, but the IP address is always the same allover the last 4 months...

After investigation, I found it is an IP address of GoDaddy Security Protection Service that I have subscribed with to provide me with a security check report on any vulnerabilities on my website...

[Chuck S]

Possibly some kind of spam bot playing with url structures although I see no issues with the specific url. I will try playing around with urls on my test site but without the ability to produce the actual error its all a guess.