Problem with session

[JensF]

Hi there,

i have a little Problem on my site. At few times i will login my site and i become this one.

I must delete the session from the Browser line and now it works. I have the problem now when i click some images. I have search the board but can´t find anyone.

[TheOracle]

The problem is here :

http://www.terraristik-gallerie.de/login.php12

The query is not being initiated correctly. It would seems you're another victim of a "possible" hack. In your index.php and login.php file, please verify if you see a long line like :

http://&number;&anothernumber

I have just read this from another forum this morning. It would seems to spread around smoothtly.

[JensF]

Hi,

i have nothing find in this two files. Its not always on every day or every login. its step to step (bad translation from me )

[TheOracle]

In that case, what does your web error logs states ?

[JensF]

I don´t now. Must wait when the problem come back.....

[TheOracle]

Must wait when the problem come back.....

Unlikely. If you have access to your web error logs from your FTP / CPanel - you could post the source of the problem right away.

[V@no]

Since this seems to be only happening on index.php, I'd would trace the changes you've made recently in that file.

[JensF]

Hi there,

this is the error log

Undefined index:  12 in /is/htdocs/wp1002994_CPP4JNYT7R/www/lang/deutsch/main.php on line 1037

and in line 1037 in my main.php i find this

$lang['anyo'] = date("Y");

This is from this mod

[MOD] Poll v2.0 (with ACP integration) NEW VERSION!!!

[V@no]

I'd suggest remove the mod and see if the problem remains, if problem gone, try to reinstall the mod.

[JensF]

Hi,

i have deinstall the Poll Mod and for some days all was OK. But now i have the same problem. I cklick a categorie and become a blank page.

The Url is http://www.terraristik-galerie.de/categories.php?cat_id=8912sessionid=xxxxxxxxxxxxxxx

And my 10 last error logs are

[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  script_url in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 469, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  rate_suffix in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 327, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  rating in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 327, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  script_url in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 469, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  rate_suffix in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 327, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  rating in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 327, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  smiles_text in /is/htdocs/wp1002994_CPP4JNYT7R/www/includes/functions.php on line 1725, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined index:  quote in /is/htdocs/wp1002994_CPP4JNYT7R/www/details.php on line 654, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  comment_headline in /is/htdocs/wp1002994_CPP4JNYT7R/www/details.php on line 676, referer: http://www.terraristik-galerie.de/details.php?image_id=1669
[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined variable:  comment_text in /is/htdocs/wp1002994_CPP4JNYT7R/www/details.php on line 677, referer: http://www.terraristik-galerie.de/details.php?image_id=1669

I don´t now what i must do

[Acidgod]

please post the functions.php in a zip file... (o:

[JensF]

please post the functions.php in a zip file... (o:

Thanks for help -> The File

[TheOracle]

[Sat Dec 31 13:12:52 2005] [error] [client 84.164.126.203] PHP Notice:  Undefined index:  quote in /is/htdocs/wp1002994_CPP4JNYT7R/www/details.php on line 654, referer: http://www.terraristik-galerie.de/details.php?image_id=1669

It also states there's an error from details.php file. Would you mind posting the ZIP file of that file as well ?

[JensF]

Yes, of course

The Detail PHP File

[TheOracle]

Ok, one thing I see here - from details.php file -

from this block :

}
  else {
$comment_quote_id = (isset($HTTP_GET_VARS['quote'])) ? $HTTP_GET_VARS['quote'] : $HTTP_POST_VARS['quote'];
if (intval($comment_quote_id)) {
  $sql = "SELECT c.comment_id, c.user_id, c.user_name AS comment_user_name, c.comment_headline, c.comment_text
          FROM ".COMMENTS_TABLE." c
          LEFT JOIN ".USERS_TABLE." u ON (".get_user_table_field("u.", "user_id")." = c.user_id)
          WHERE c.comment_id = $comment_quote_id";
  $result = $site_db->query_firstrow($sql);
    $comment_text = (isset($HTTP_POST_VARS['comment_text']) && $error) ? stripslashes(trim($HTTP_POST_VARS['comment_text'])) : "";
      $comment_headline = (isset($HTTP_POST_VARS['comment_headline']) && $error) ? stripslashes(trim($HTTP_POST_VARS['comment_headline'])) : "";
   if ($result['comment_text']) {
      $comment_text .= "

".$result['comment_text']."

";
   }
   if ($result['comment_headline']) {
      $comment_headline .= "RE: ".$result['comment_headline'];
   }
}

replace it with :

Code: [Select]


}
  else {
if (isset($HTTP_GET_VARS['quote']) || isset($HTTP_POST_VARS['quote'])) {
$comment_quote_id = (isset($HTTP_GET_VARS['quote'])) ? $HTTP_GET_VARS['quote'] : $HTTP_POST_VARS['quote'];
if (intval($comment_quote_id)) {
  $sql = "SELECT c.comment_id, c.user_id, c.user_name AS comment_user_name, c.comment_headline, c.comment_text
          FROM ".COMMENTS_TABLE." c
          LEFT JOIN ".USERS_TABLE." u ON (".get_user_table_field("u.", "user_id")." = c.user_id)
          WHERE c.comment_id = $comment_quote_id";
  $result = $site_db->query_firstrow($sql);
    $comment_text = (isset($HTTP_POST_VARS['comment_text']) && $error) ? stripslashes(trim($HTTP_POST_VARS['comment_text'])) : "";
      $comment_headline = (isset($HTTP_POST_VARS['comment_headline']) && $error) ? stripslashes(trim($HTTP_POST_VARS['comment_headline'])) : "";
   if ($result['comment_text']) {
      $comment_text .= "[quote=".$result['comment_user_name']."]".$result['comment_text']."[/quote]";
   }
   if ($result['comment_headline']) {
      $comment_headline .= "RE: ".$result['comment_headline'];
    }
  }
}


This should get rid of the error from details.php file since the 'quote' name wasn't pre-defined first. Now, it should be.