Katie, what is the Hostname of that log? Earnie, I found Boost and disabled that, but it still doesn't work. I got another access denied for admin/settings/google_admanager (when submitting this settings form not viewing) which is the WSOD page that started this whole goose chase. :( I had them restart Apache also but they said it won't make a difference because it runs as CGI, not as an Apache module. Thanks On Wed, Nov 7, 2012 at 4:27 PM, Earnie Boyd <earnie@users.sourceforge.net>wrote:

On Wed, Nov 7, 2012 at 9:20 AM, Fred Jones wrote:

...

I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.

The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.

I can't find any report of this issue. Anyone ever see such a thing?

Do you have an external cache running? Does restarting your httpd service help?

-- Earnie -- https://sites.google.com/site/earnieboyd -- [ Drupal support list | http://lists.drupal.org/ ]

On Wed, Nov 7, 2012 at 11:01 AM, Fred Jones <fredthejonester@gmail.com> wrote:

Katie, what is the Hostname of that log?

Earnie, I found Boost and disabled that, but it still doesn't work. I got another access denied for admin/settings/google_admanager (when submitting this settings form not viewing) which is the WSOD page that started this whole goose chase. :(

Ok, have you cleared the cache tables since disabling boost? Do you have any performance checkboxes checked on the performance admin page? Check your DB system logs, maybe it is causing the WSOD. The watchdog log entry will say anonymous if the user table is broken and it cannot load the rows from the DB.

I had them restart Apache also but they said it won't make a difference because it runs as CGI, not as an Apache module.

Do you have any PHP caching variables enabled? Even though it is CGI, Apache may still cache and cause issues. -- Earnie -- https://sites.google.com/site/earnieboyd

Either clearing the sessions table or deleting cookies will usually cure it and effectively do the same thing. The user or session table can also be corrupted. You can also use ini_set to turn on display_errors. the WSOD is from having a suppressed php error that can't be displayed. If you have direct database access it will be in syslog or the watchdog table in your db, depending on how you're set up. -Don- On 11/7/2012 7:12 PM, Jeff Greenberg wrote:

Seems to me that I ran into this before and it was a cookie issue

On Nov 7, 2012, at 9:20 AM, Fred Jones <fredthejonester@gmail.com> wrote:

...

I have a Drupal 6.26 site on a VPS. At random, pages return WSOD and no log in Apache. Whenever this happens I see an access denied error in the log from user Anonymous and the URL I just tried and the time etc.

The hostname there is the IP of the server itself. That's what's bizarre. Also that it's anonymous. I am logged in as user #1.

I can't find any report of this issue. Anyone ever see such a thing?

Thanks, Fred -- [ Drupal support list | http://lists.drupal.org/ ]

On Thu, Nov 8, 2012 at 6:22 AM, Fred Jones <fredthejonester@gmail.com> wrote:

Turns out this site was hacked. Same hack as http://petetasker.wordpress.com/2012/07/23/joomla-pharma-hack

Make sure you change all passwords, including the DB. Be sure the .htaccess file only has read permissions. -- Earnie -- https://sites.google.com/site/earnieboyd