I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Thanks, Fred
That's interesting I had an access denied error yesterday on D6 from someone who has logged in before and has a valid username. The access denied error says she is user Anonymous.
Katie Legere Systems Coordinator, Queen's University Library Queen's University x75297 ________________________________ From: support-bounces@drupal.org [support-bounces@drupal.org] on behalf of Fred Jones [fredthejonester@gmail.com] Sent: Wednesday, November 07, 2012 9:20 AM To: support@drupal.org Subject: [support] Strange access denied Error
I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Thanks, Fred
On Wed, Nov 7, 2012 at 9:20 AM, Fred Jones wrote:
I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Do you have an external cache running? Does restarting your httpd service help?
Katie, what is the Hostname of that log?
Earnie, I found Boost and disabled that, but it still doesn't work. I got another access denied for admin/settings/google_admanager (when submitting this settings form not viewing) which is the WSOD page that started this whole goose chase. :(
I had them restart Apache also but they said it won't make a difference because it runs as CGI, not as an Apache module.
Thanks
On Wed, Nov 7, 2012 at 4:27 PM, Earnie Boyd earnie@users.sourceforge.netwrote:
On Wed, Nov 7, 2012 at 9:20 AM, Fred Jones wrote:
I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no
log
in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Do you have an external cache running? Does restarting your httpd service help?
-- Earnie
-- https://sites.google.com/site/earnieboyd
[ Drupal support list | http://lists.drupal.org/ ]
From admin/reports/dblog
The log entry says:
user November 6, 12:14 pm (Tue) Login attempt failed for einarson
Anonymous
Many others have been able to log in - it's just her.
Katie Legere Systems Coordinator, Queen's University Library Queen's University x75297 ________________________________ From: support-bounces@drupal.org [support-bounces@drupal.org] on behalf of Fred Jones [fredthejonester@gmail.com] Sent: Wednesday, November 07, 2012 11:01 AM To: support@drupal.org Subject: Re: [support] Strange access denied Error
Katie, what is the Hostname of that log?
Earnie, I found Boost and disabled that, but it still doesn't work. I got another access denied for admin/settings/google_admanager (when submitting this settings form not viewing) which is the WSOD page that started this whole goose chase. :(
I had them restart Apache also but they said it won't make a difference because it runs as CGI, not as an Apache module.
Thanks
On Wed, Nov 7, 2012 at 4:27 PM, Earnie Boyd <earnie@users.sourceforge.netmailto:earnie@users.sourceforge.net> wrote: On Wed, Nov 7, 2012 at 9:20 AM, Fred Jones wrote:
I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Do you have an external cache running? Does restarting your httpd service help?
-- Earnie -- https://sites.google.com/site/earnieboyd -- [ Drupal support list | http://lists.drupal.org/ ]
On Wed, Nov 7, 2012 at 11:01 AM, Fred Jones fredthejonester@gmail.com wrote:
Katie, what is the Hostname of that log?
Earnie, I found Boost and disabled that, but it still doesn't work. I got another access denied for admin/settings/google_admanager (when submitting this settings form not viewing) which is the WSOD page that started this whole goose chase. :(
Ok, have you cleared the cache tables since disabling boost? Do you have any performance checkboxes checked on the performance admin page? Check your DB system logs, maybe it is causing the WSOD. The watchdog log entry will say anonymous if the user table is broken and it cannot load the rows from the DB.
I had them restart Apache also but they said it won't make a difference because it runs as CGI, not as an Apache module.
Do you have any PHP caching variables enabled? Even though it is CGI, Apache may still cache and cause issues.
Seems to me that I ran into this before and it was a cookie issue
On Nov 7, 2012, at 9:20 AM, Fred Jones fredthejonester@gmail.com wrote:
I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Thanks, Fred -- [ Drupal support list | http://lists.drupal.org/ ]
Either clearing the sessions table or deleting cookies will usually cure it and effectively do the same thing. The user or session table can also be corrupted.
You can also use ini_set to turn on display_errors. the WSOD is from having a suppressed php error that can't be displayed. If you have direct database access it will be in syslog or the watchdog table in your db, depending on how you're set up.
-Don-
On 11/7/2012 7:12 PM, Jeff Greenberg wrote:
Seems to me that I ran into this before and it was a cookie issue
On Nov 7, 2012, at 9:20 AM, Fred Jones fredthejonester@gmail.com wrote:
I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.
The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.
I can't find any report of this issue. Anyone ever see such a thing?
Thanks, Fred -- [ Drupal support list | http://lists.drupal.org/ ]
Turns out this site was hacked. Same hack as http://petetasker.wordpress.com/2012/07/23/joomla-pharma-hackhttp://petetasker.wordpress.com/2012/07/23/joomla-pharma-hack/#comment-40
Fred
On Thu, Nov 8, 2012 at 6:22 AM, Fred Jones fredthejonester@gmail.com wrote:
Turns out this site was hacked. Same hack as http://petetasker.wordpress.com/2012/07/23/joomla-pharma-hack
Make sure you change all passwords, including the DB. Be sure the .htaccess file only has read permissions.