Site HACKED??? Or a Big BUG???

Just the other day, one of my sites started acting funny,

Users try to log into chat room, they get redirected to 1 profile.

Try to view pictures on my profile, get redirected to same profile

Same thing with other re-directs etc...

The profile its redirecting to just happens to be user 500

Not sure if this is relevant or not.

Was about to delete the profile see if that does anything but really dont know whats caused this or where it came from.

Anyone else had something like this???

The URLS in the chat module on navigation menu had been changed to something odd.

However, even after changing them back they still try to point to the same user!...?

I can type in mysite.com/m/chat/home/ in browser and it looks for user 500 not the chat room.

Any ideas???

Same with Videos, photos, all the standard modules apart from Forum are screwed.

7.0.5

HELP!

I'm not sure why this is happening, but you might want to revert to your most recently working backup.

Its any links on the site that are m/ that re-direct.

Blogs, Forum, anything else that doesnt have m/ prefix still works.

I've seen this (or something very similar) happen before. Have you been doing anything lately with your site that may have caused this?

It may be stupid, but perhaps a 500 internal error is occurring and instead of the normal message, member 500 comes up.

Try replacing the dolphin root .htaccess file with a clean copy from a dolphin 7 zip file that matches the version of dolphin your running.

Where can I get a .htacess for 7.0.5 from...

I installed using softaculous, didnt dload the original files.

I have another site running 7.0.5, would he htaccess be the same on that or different?

Not sure why a 500 internal error would only effect anything starting m/ though?

And nothing was installed or changed on the site when this happened.

Checked .htaccess against another site on same version and nothing has changed there.

Anyone know where in the code any directs happen from /m ?

Am wandering if somehow this rule has been changed to point to member 500 somewhere

Tried uninstalling - reinstalling specific modules but nothing changes.

Yes, that redirect happens in the .htaccess file. If there is any damage at all to that file. Even one character, it can trigger an internal error.

Thats why i suggested replacing it.

is there a download link for 7.0.5 .htaccess file though?

I can only see update dloads, and 7.0.6 files..

There's been no changes to the .htaccess file in over a year. You shouldn't have any problems uploading the .htaccess file from Dolphin 7.0.6.

no, have updated .htacess and is still the same...

DosDawg and I tried to deal with this problem before, but I forgot most of the details behind it. I'll send him a message and see if he remembers anything.

Thanks, really really appreciate any help on this.

So, you've seen this before???

Wander if this has been fixed in 7.0.6

still getting nowhere with this.

just noticed the errorlog file in modules is over 2GB in size though...

Dload so i can have a look as cpanel wont allow me to view the file as its so large...

I might be out in the blue, but user 500 ? Sounds like you have server error 500 and since /500.html or whatever dont exist the .htaccess file redirects you to user of that request, eg /url/dont/work server issue a error 500 (internal error) and will send request to show /500.html, instead that file done EXIST on your server so rewrite takes over the request and you get redirected to the profile page...

# profile rewrite
if (!-e $request_filename ) {
rewrite ^/([^/]+)$ /profile.php?ID=$1 last;
break;
}

As you can see from nginx rewrite rule, if the filename don't exist, it will rewrite the request to /profile.php .. there you have your answer ( i guess..)

first, make sure you have files to take care of the first redirect that will point to eg /500.html or whatever, next, check your logs what causing Internal error behaviour.

Hope it helps Magnus to remember the complete solution too ;)

hmmm, sounds promising.

It was actually pointing to a real user 500 at first, until I deleted them... now it still searches for that user and says profile not found.

Where would the logs be that tell me what the error is?

Thanks

Check the error_log from your webserver.

Check your control panel what it tells you what page it sends all the error 500 to first, so you don't get your logs filled up, and if it says /500.html then make sure you create one empty or with a simple text 'Internal error' so your .htaccess don't redirect it futher to the profile page.

Cant find where it tells me what page error 500 goes to?

Ive created a 500.html page but it still directs to the profile of member 500...

I have no clue what control panel you are using, so you have to dig up some own information or read the manual how to setup error pages that it should redirect to.

In cPanel you find Error Pages under Advanced section, it will create /500.shtml page for you where the webserver will redirect all Internal Error (500) to.

In apache configure file, if you have access to modify this, you can add 'ErrorDocument 500 "Internal Server ErrorThe server encountered an internal error or misconfiguration and was unable to complete your request" and restart your apache server. (add in your virtuall host section)

In cPanel you have an link 'Error log' that will show you the latest problems from your error_log.

Is there an index.php file under the /modules/ directory?

Also, I've moved this into the correct forum, as this is not a bug.

Yes there is a index.php file in /modules/

Do you think this is a hack or an error?

I'd check the last few lines of the error log, and post them here.

I guess 99.99% of the file are regarding the problem, hard for me to tell you want to look for, i dont know the exact error message, thats why you have the file.

Try look in the end of the file, and look for lines that are the same content and paste some lines here and we can see if we can figure it out.

have dloaded the error log - 2GB...

any idea what it opens with???

Wont open with any progs Ive tried so far.

No extensions on the end of the file.

You should be able to open it with any text editor.

Last time this happened to me, we found a missing index.php file from the modules directory. It really acted weird and kept rerouting everyone to user #404, LOL!

Compare your zip file with the files on your server, find the missing file and replace it.

index file is fine, htaccess is fine.

I cant open the error_log in modules as its over 2GB in size!

Maybe this has something to do with it.

dloaded it, it wont open in any text viewer either.

Will try replacing it with a clean file see if its anything to do with the prob

BINGO!!!

Was the error_log file in Modules directory. Either there's a limit on the file size (2GB) and then it wont read or write or something like that.

Anyway, dloaded it, server created a new one, then it all works...

Just need to read the new one find out whats writing 2GB worth of error files now.....!

Thanks for all the input for help

This is the error (and others similair) thats being written to error_log countless times a second...

If anyone has any idea what is causing this, please let me know!

[17-Apr-2011 06:31:29] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:31:29] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:31:29] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:31:29] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:31:29] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:31:29] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:25] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:25] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:25] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:25] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:25] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:35:25] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:36:20] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:36:20] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:36:20] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:36:20] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:36:20] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:36:20] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:38:39] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:38:39] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:38:39] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:38:39] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:38:39] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:38:39] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:39:08] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:39:08] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:39:08] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:39:08] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:39:08] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0
[17-Apr-2011 06:39:08] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0

Then it's proberly a internal server error 500 you get then and since the errordocument don't exist the rewrite rules takes the page into profiles page and want to show profile id 500.

Is it a shared host / vps / dedicated server you are on ? You simple have to download a fresh php version and the modules (should be updated with the new php you install) or you have compiled your own php ?

Dedicated server.

Have contacted host to look into it.

Try keep record of what you are doing with your server, that way you can always go back and see what you did that day when the problem accured.

I think your php have been upgraded but someone forgot to upgrade your modules aswell to php, since of the missing library files, should be easy fixed.

Good luck and get back here and tell us how it went.

Remember that error logs are always your best friends to find problem, and google ;)

Something had changed in php on server. Not sure what just yet, dedicated server and I hadnt changed anything all weekend when the errors started.

This sent up thousands of constant errors to error_log in modules.

When it reached 2GB it stopped write access and threw up a system error 500

Because there was no system error 500 file, it was re-routed to profile 500!...

This was the problem and is now fixed :-)

You are welcome....

Remember that google and your error_log is your best friends, always look there first and see if you can figure out what the problem is.

Glad your problem is solved.