| Message Text |
My server admin has asked me to make some changes to my site because of these error messages below. It seems to be a security concern.
I'm not very familiar with SQL syntax nor do I understand what the security problem is. Can you suggest what changes I should make?
The website is http://www.elementlist.com.
Thanks.
Sample Error Messages::
Mar 20 08:00:00 monk hphp[4252]: ALERT - MySQL error: You have an
error in your SQL syntax near '' at line 1 - query: UPDATE
wsnlinks_links SET importance='6' WHERE id= (attacker
'68.142.249.10', file '/home/sites/www.elementlist.com/htdocs/lnx/
classes/database.php', line 171)
Mar 20 08:32:31 monk hphp[4253]: ALERT - MySQL error: You have an
error in your SQL syntax near '' at line 1 - query: SELECT
id,title,url,description,rating,votes,validated,catid,sumofvotes,email
,time,hits,numcomments,hide,ownerid,voterips,voterids,lastedit,type,fi
lename,filetitle,notify,suspect,downloads,pendingedit,funds,suspended,
alias,expire,ip,inalbum,typeorder,recipurl,hitsin,recipwith,hitsinips,
hitsoutips,lastcomment,related,inhidden,viewers,threadviewers,hitsinte
mp,hitsouttemp,origtype,importance,parentids,timesdead,timesemailed,th
readclosed,threadposters FROM wsnlinks_links WHERE id= (attacker
'72.30.129.105', file '/home/sites/www.elementlist.com/htdocs/lnx/
classes/database.php', line 171)
Mar 20 08:41:10 monk hphp[4251]: ALERT - MySQL error: You have an
error in your SQL syntax near '' at line 1 - query: UPDATE
wsnlinks_links SET downloads='1' WHERE id= (attacker
'68.142.251.97', file '/home/sites/www.elementlist.com/htdocs/lnx/
classes/database.php', line 171)
Mar 20 08:41:10 monk hphp[4251]: ALERT - MySQL error: You have an
error in your SQL syntax near '' at line 1 - query: UPDATE
wsnlinks_links SET importance='6' WHERE id= (attacker
'68.142.251.97', file '/home/sites/www.elementlist.com/htdocs/lnx/
classes/database.php', line 171) |
