Two Errors in 1.0.0, One error in 1.0.1 (with a rapid rollback)

[Black Viper]

A review of my Error Log on SMF 2.0 RC2 is the following:

Guest
07:03:13 am
Type of error: Template
hxxp://example.com/index.php?action=adpro;sa=v&di=5&t=1264863792
Unable to load the 'main' template.

and

07:03:13 am
Type of error: Undefined
hxxp://example.com/index.php?action=adpro;sa=v&di=5&t=1264863792
Undefined index: id
File: R:/My/Forum/Path/Sources/adseller2.php
Line: 1753

These errors number in the hundreds (not just a today issue)

I updated to 1.0.1 earlier today to be greeted with this error in the logs:

hxxp://example.com/index.php?action=adpro;sa=v&id=4&t=1264850271
index: m
File: R:/My/Forum/Path/Sources/adseller2.php
Line: 1814

As such, I rolled back to 1.0.0 and wait for a response (since both versions had errors, better to use one that I know is "working" as far as I can tell).

If you need further info, just let me know.

[SMFHacks]

The first error looks like it maybe tied with second one and I am not getting error currently on my board.

The second looks like someone changed the url Undefined index: id  the url has di instead of id. Did a search of the current code and found no occurances of di.


Added a check for the third error so that one will be fixed.

All this is in 1.0.2 should be released today after add WAP2 support.

[Black Viper]

The first error looks like it maybe tied with second one and I am not getting error currently on my board.

The second looks like someone changed the url Undefined index: id  the url has di instead of id. Did a search of the current code and found no occurances of di.

Well, both have "di" in the URL. More info: the error is while using the SSI function, not on the normal forum locations. This happens in the logs for all three SSI ad locations, meaning, each IP address throws up 3 errors (di=3, di=4, di=5). I have several pages of them from different IP addresses, so no one could have changed just one URL and carried on with it, if ya know what I mean...
All look as though they are guests (the first couple pages of them). I can examine the server log directly to see what browser a couple of them are using and post back.

[SMFHacks]

I am not sure how di is getting there..Check the page that your ssi calls are on to see how they look. The links for view and click tracking are generating by Sources/AdSeller2.php so it shouldn't matter if it comes from the forum or by SSI

[Black Viper]

Well here is more information directly from the server log files... The log may tell the story (slightly edited):

This is the request from the domain with the SSI that generated the below calls:

<IP> - - [29/Jan/2010:07:47:12 -0800] "GET <URL of page> HTTP/1.1" 200 3309 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"

This is only my forum log (not the original request).

<IP> - - [29/Jan/2010:07:47:12 -0800] "GET /index.php?action=adpro;sa=v&di=3&t=1264780032 HTTP/1.1" 200 2169 "<page coming from>" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"
<IP> - - [29/Jan/2010:07:47:12 -0800] "GET /index.php?action=adpro;sa=v&di=4&t=1264780032 HTTP/1.1" 200 2145 "<page coming from>" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"
<IP> - - [29/Jan/2010:07:47:12 -0800] "GET /index.php?action=adpro;sa=v&di=5&t=1264780032 HTTP/1.1" 200 2171 "<page coming from>" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"
<IP> - - [29/Jan/2010:07:47:13 -0800] "GET /index.php?action=adpro;sa=v&id=4&t=1264780032 HTTP/1.1" 200 49 "<page coming from>" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"
<IP> - - [29/Jan/2010:07:47:13 -0800] "GET /index.php?action=adpro;sa=v&id=5&t=1264780032 HTTP/1.1" 200 49 "<page coming from>" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"
<IP> - - [29/Jan/2010:07:47:13 -0800] "GET /index.php?action=adpro;sa=v&id=3&t=1264780032 HTTP/1.1" 200 49 "<page coming from>" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"

Anyway, it is requesting the "di" urls (the first three lines) one second before the "id" files, the last three log lines...

(a few minutes later)
Ok, it looks like the following user agents (small sample) are kicking the errors:

"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.39 Safari/530.5"
"Mozilla/5.0 (Linux; U; Android 1.5; en-us; MB200 Build/CUPCAKE) AppleWebKit/528.5+ (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1"
"Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/525.1+ (KHTML, like Gecko, Safari/525.1+) pythumbnail.py"
"Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0_1 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A400 Safari/528.16"

The major thing in common with all of them is AppleWebKit, but why is it requesting "di" to start with?
This is just a small snip, though... I have many of these errors.

Will need to dig deeper later on... maybe after 1.0.2 to start fresh and be able to monitor closer.

I thank you for your time.

[Black Viper]

Well, I just tried with my Motorola Droid to generate an error, and it works fine.
Will investigate further later on to see if I can generate the error myself using something that I know is not a bot.
Thanks again.