Code: Select all
PHP Warning: mysqli::query(): (42000/1064): You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'Azur|Marseille', `customer_id` = '0', `url` = 'https://mywebsite.com/...' at line 1 in /home/user/path/system/library/db/mysqli.php on line 25
v3.0.3.9 php 8.1
I'm here for a reason, if your response is contact a/the developer, just don't reply.
Why would an sql syntax error be a hack attempt?Joe1234 wrote: ↑Wed Aug 21, 2024 10:32 amI saw the following OC error log. I believe it is from a hack attempt. I see it popped up twice. Any idea how to prevent this?Code: Select all
PHP Warning: mysqli::query(): (42000/1064): You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'Azur|Marseille', `customer_id` = '0', `url` = 'https://mywebsite.com/...' at line 1 in /home/user/path/system/library/db/mysqli.php on line 25
The default query in online.php has the ip address prior to "`customer_id` ="ADD Creative wrote: ↑Wed Aug 21, 2024 4:02 pmYou would need to find the query that has the issue. Could be a modification to the one in catalog/model/tool/online.php.
It's not necessary a hack attempt, especially if you are seeing the error when browsing your site, but could point to a query that is vulnerable.
Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig
Which is why I said it could be a modification to that query. It likely an extension that gathers more information about visitors, which probably either modified the query or replaces the customer online section completely.nonnedelectari wrote: ↑Wed Aug 21, 2024 4:15 pmThe default query in online.php has the ip address prior to "`customer_id` ="ADD Creative wrote: ↑Wed Aug 21, 2024 4:02 pmYou would need to find the query that has the issue. Could be a modification to the one in catalog/model/tool/online.php.
It's not necessary a hack attempt, especially if you are seeing the error when browsing your site, but could point to a query that is vulnerable.
"'Azur|Marseille'", doesn't look like an ip address.
I'm not saying this one is a hack attempt, but have you not heard of SQL injection?
UK OpenCart Hosting | OpenCart Audits | OpenCart Support - please email info@antropy.co.uk
Is that a rhetorical question?paulfeakins wrote: ↑Wed Aug 21, 2024 7:42 pmI'm not saying this one is a hack attempt, but have you not heard of SQL injection?
v3.0.3.9 php 8.1
I'm here for a reason, if your response is contact a/the developer, just don't reply.
Well, if you keep an up to date copy of your source locally, it is relatively easy to search. Besides, default OC only has three queries which store a url, only one on the catalog side.Joe1234 wrote: ↑Thu Aug 22, 2024 1:59 amThanks all.
Coding was the issue...I thought it was a hack because this code has been running for 3 months and this is the first time this issue popped up. It looks like a string with an apostrophe was a part of the variable this time around. At least I'm assuming that is the reason because I can't see anything else that would cause that in the php error logs that match up with the OC log. So I added $this->db->escape() around the variable on the query.
I find it amazing that you have all this OC coding in your head that you can identify the function and page that this example came from.
Users browsing this forum: Gpli, Majestic-12 [Bot] and 15 guests
