CPG Dragonfly™ CMS

rosbif · Joined: Jan 13, 2005 Posts: 571 Location: Paris, France

There's a slight error in footer.html in the templates folder. From line 24 should read (to stop php and sql messages being displayed to non-admin)

PHP:


  {S_FOOTER}
  <!-- IF S_IS_ADMIN -->
  <!-- IF S_DEBUG_SQL --><div class="table1">{S_DEBUG_SQL}</div><!-- ENDIF -->
  <!-- IF S_DEBUG_PHP --><div class="table1">{S_DEBUG_PHP}</div><!-- ENDIF -->
  <!-- ENDIF -->
</div>

(Thanks Diz!)

Phoenix · Joined: Apr 19, 2004 Posts: 8729 Location: Netizen

Not true - in fact such a change would prevent the intentional display of debugging information.

Display is already controlled within footer.php.

PHP:

if (is_admin() || CPG_DEBUG)

where S_DEBUG_PHP and S_DEBUG_SQL are generated.

Dizfunkshunal · Joined: Mar 23, 2006 Posts: 2079

debug only shows up for me on default theme when i am logged in as admin. On rosbif site with the theme he is using it shows to everyone.

Phoenix · Joined: Apr 19, 2004 Posts: 8729 Location: Netizen

The theme's not the problem - it's clear that he has set CPG_DEBUG.

rosbif · Joined: Jan 13, 2005 Posts: 571 Location: Paris, France

Phoenix wrote:

The theme's not the problem - it's clear that he has set CPG_DEBUG.

I don't even know how to do that?! All I did was tick the boxes on the admin pages..

Phoenix · Joined: Apr 19, 2004 Posts: 8729 Location: Netizen

The php and mysql debug info can only appear if:

You have edited footer.php and removed the existing permission checks
or
You have set "Full debugging" to "Yes" in admin.php?op=settings&s=11 (perhaps inadvertently)
or
You have directly edited the CPG_DEBUG setting in config.php which achieves the same

Theme templates do not require extra permission checks - they already exist in footer.php.

NanoCaiordo · Joined: Jun 29, 2004 Posts: 3677 Location: Melbourne, AU

What Phoenix said.

rosbif · Joined: Jan 13, 2005 Posts: 571 Location: Paris, France

Phoenix wrote:

The php and mysql debug info can only appear if:

You have edited footer.php and removed the existing permission checks
or
You have set "Full debugging" to "Yes" in admin.php?op=settings&s=11 (perhaps inadvertently)
or
You have directly edited the CPG_DEBUG setting in config.php which achieves the same

Theme templates do not require extra permission checks - they already exist in footer.php.

I've looked and full debugging was set to yes. I've no idea what that setting does so presume that is the problem?

rosbif · Joined: Jan 13, 2005 Posts: 571 Location: Paris, France

Have turned full debugging to no and I am now getting around 24 emails an hour like this:

Quote:

On /CPGNuCalendar/view=event/id=610/BD/op=directory/cid=88.html
While executing query "SELECT uoe_id, user_id, user_name, event_id, event_date FROM chantill_cpgnucalendar_user_on_event WHERE event_id =610 AND event_date ="

the following error occured: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

In: /home/chantill/public_html/modules/CPGNuCalendar/index.php on line: 859

Guest information:
User id: 1
Username: Anonymous
Admin: No
IP: 67.195.113.250
Host: b3091018.crawl.yahoo.net

They are all malformed URLs - how do I stop them now as I wasn't getting them before

Phoenix · Joined: Apr 19, 2004 Posts: 8729 Location: Netizen

Your CPG_DEBUG issue is resolved - you'll have to address the other issue elsewhere with whoever is responsible for that sql query.

I'm certainly not familiar with it - not part of any standard release that I know of.

rosbif · Joined: Jan 13, 2005 Posts: 571 Location: Paris, France

The sql query is a mishmash from CPGNuCalendar and BD (business directory) so it doesn't actually exist. I've turned full debugging back to yes and it's stopped them again. What exactly does it do?

Phoenix · Joined: Apr 19, 2004 Posts: 8729 Location: Netizen

The query clearly does exist or you wouldn't have the problem.

Please refer it to the author of whatever hack you have applied to CPGNuCalendar.

The theme issue is done.

rosbif · Joined: Jan 13, 2005 Posts: 571 Location: Paris, France

I am getting random SQL queries, all starting with CPGNuCalendar but then having bits added on from random other modules. It is always a bot that generates them

Phoenix · Joined: Apr 19, 2004 Posts: 8729 Location: Netizen

Quote:

What exactly does it do?

When CPG_DEBUG is set, errors are displayed instead of emailed - that means you expose your site issues to everyone.

As I have already stated twice, you need to address the other issue to the author of whatever CPGNuCalendar hack you are using - this topic is done.

CPG Dragonfly™ CMS

DedicatedNow