Strange DB error messages after installing PL 1

Posted on March 13th, 2010 by anonym
  • Hi all,

    I've just upoaded the patch level 1 today, and since then I've been getting a number of data base errors:

    Invalid SQL:


    SELECT profilefieldid, required, title, size, maxlength, type, data, optional, regex
    FROM profilefield
    WHERE profilefieldid IN(1, 2, 11, 13, 4, 3, 5, 6, 7, 8, 9, 12)
    AND editable IN (1, 2)
    ORDER BY displayorder;


    MySQL Error : Unknown column 'title' in 'field list'
    Error Number : 1054
    Request Date : Thursday, July 10th 2008 @ 05:08:06 AM
    Error Date : Thursday, July 10th 2008 @ 05:08:06 AM
    Script : http://www.mydomain.com/forums/register.php?do=addmember
    Referrer : http://www.mydomain.com/forums/register.php?do=register
    IP Address : 86.147.10.191
    Username : Browny1
    Classname : vb_database
    MySQL Version :



    I've received a number of these in the last few minutes - others from Username : yadidone
    Username : Spaccetbasp
    Username : jazzyjaz1973

    The thing is - these are not my users :confused: I've also checked "who's online" and it just shows unregistered users with these IP trying to post messages or what-not. Are these bots trying to sign up and the new patch is spazzing out on this? I've googled these user names and it seems that they are registered elsewhere.

    Any thoughts or assistance would be highly appreciated on this. Thanks!


  • I'm sorry, what version of vBulletin are you using?

    Are you getting any errors yourself, or are you just being notified of the errors of those users? If those usernames are all coming from the same IP address, it's possible you're being attacked. If you want to ban the IP Address of the possible attacker, go to your AdminCP » vBulletin Options » User Banning Options, and then, enter their IP under Banned IP Addresses.


  • Well, if you look, the error is originating at register.php. That means that those are the names they are TRYING to register with. But, you won't find them as actual forum members, as they failed to register. The problem appears to be profile fields, so, either something is set up wrong, and those people are legitimate trying to register (maybe you should try a test registration?), or they have found a minor SQL exploit, and are trying to do something bad.

    Or perhaps something else over my head. I'm not a pro with SQL yet. >.<


  • Hi Mopquill,

    I'm using the latest version 3.7.2 - with the latest patch. This only started happening minutes after the patched files were uploaded.

    The messages are coming from my server via the autoresponse in vBulletin notifying me of database errors. What is odd is that the error messages indicate a user name (none of these user names are listed in my forum), yet if I check the "who's online", these are merely guests (no user name indicated) - as if they are bots. They are coming from differing IP addresses. I've blocked most of these via .htaccess and vB's banning options.

    I'm getting a few of these messages every hour or so.


  • Thanks! I also noticed that the automated "New Post/Thread" notification was not working during this time. So I uploaded the older "non-patched" files, and everything is back to normal.

    I'll try troubleshooting this later with uploading the patched files again. :p







    • #If you have any other info about this subject , Please add it free.#
    Your name:
    E-mail:
    Telphone:

    Your comments:


    If you have any other info about Strange DB error messages after installing PL 1 , Please add it free.

    Tags: badahutong.com edit //