This Help forum is for issues relates to the latest release (1.6.x). For issues related to beta or github version please use their own Help forum.
Before asking for help please read "How to request help" by clicking on that tab above here.
  • Page:
  • 1

TOPIC:

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #1

  • Andreas
  • Andreas's Avatar Topic Author
  • Offline
  • Premium Member
  • Premium Member
  • Posts: 613
Should I take care of these LOG-file entries?
2015-07-10 20:47:06	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "0"	46.161.41.199	<none>	GAC.ged
2015-07-10 20:47:06	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "1"	46.161.41.199	<none>	GAC.ged
2015-07-06 00:42:43	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1436136163"	46.161.41.199	<none>	GAC.ged
2015-07-03 18:07:42	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "0"	46.161.41.199	<none>	GAC.ged
2015-07-03 18:07:42	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "1"	46.161.41.199	<none>	GAC.ged
2015-07-03 00:05:25	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1435874725"	46.161.41.199	<none>	GAC.ged
2015-06-15 07:03:53	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "1"	46.161.41.199	<none>	GAC.ged
2015-06-15 07:03:53	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "0"
........
........
........
2015-04-18 17:45:46	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "0"	46.161.41.199	<none>	GAC.ged
2015-04-18 17:45:46	config	Tree setting "EXPAND_NOTES_DEFAULT" set to "1"	46.161.41.199	<none>	GAC.ged
2015-04-11 23:07:29	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1428786449"	46.161.41.199	<none>	GAC.ged
2015-04-04 16:27:42	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1428157662"	46.161.41.199	<none>	GAC.ged
2015-04-03 10:53:50	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1428051229"	46.161.41.199	<none>	GAC.ged
2015-03-07 15:02:13	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1425736933"	46.161.41.199	<none>	GAC.ged
2015-03-01 10:52:23	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1425203543"	46.161.41.199	<none>	GAC.ged
2015-02-28 08:49:06	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1425109746"	46.161.41.199	<none>	GAC.ged
2015-02-19 02:38:45	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1424309925"	46.161.41.199	<none>	GAC.ged
2015-02-15 23:56:06	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1424040966"	46.161.41.199	<none>	GAC.ged

The IP address is referring to a russian entry, known for hacking
see: stopforumspam.com/ipcheck/46.161.41.199

As I am curious. What are they trying?

Is it to be seen in the context that I can't access the site access rules in the backend?

I get the following error:
Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[70100]: <<Unknown error>>: 1317 Query execution was interrupted' in /home/rauhut/wt/library/WT/DB.php:266 Stack trace: #0 /home/rauhut/wt/library/WT/DB.php(266): PDO->exec('DELETE unknown ...') #1 /home/rauhut/wt/admin_site_access.php(270): WT_DB::exec('DELETE unknown ...') #2 {main} thrown in /home/rauhut/wt/library/WT/DB.php on line 266

How can I get rid of it?
MAUPILLÉ & RAUHUT family using webtrees V2.0.11 & V1.7.17

Please Log in or Create an account to join the conversation.

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #2

  • Jackie
  • Jackie's Avatar
  • Offline
  • Platinum Member
  • Platinum Member
  • Posts: 4755
Hello Andreas,

A line such as..:
2015-07-10 14:55:03	config	Site setting "LATEST_WT_VERSION_TIMESTAMP" set to "1436540103"
(from my own logs)

.. is normal in your logs/config

Ignore this. That is not a problem

Please Log in or Create an account to join the conversation.

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #3

  • fisharebest
  • fisharebest's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 14491
The update to LATEST_WT_VERSION_TIMESTAMP is harmless. This is just webtrees checking for updates.

I do not recognise EXPAND_NOTES_DEFAULT. Perhaps is comes from a custom module.

As I am curious. What are they trying?


These logs tell you nothing. To see what they were trying, you would need to examine the webserver (e.g. "apache") logs.

I get the following error:


I think this indicates that your webhost has set a maximum time limit for SQL queries, and this query is being killed because it takes too long.

Try again when the server is less busy?
Greg Roach - This email address is being protected from spambots. You need JavaScript enabled to view it. - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #4

  • Jackie
  • Jackie's Avatar
  • Offline
  • Platinum Member
  • Platinum Member
  • Posts: 4755

2015-07-10 20:47:06 config Tree setting "EXPAND_NOTES_DEFAULT" set to "0" 46.161.41.199 <none> GAC.ged
2015-07-10 20:47:06 config Tree setting "EXPAND_NOTES_DEFAULT" set to "1" 46.161.41.199 <none> GAC.ged


A "tree setting" though, is more worrying. Do you have access to your server logs?

EDIT: busted by Greg ;-)

Please Log in or Create an account to join the conversation.

Last edit: by Jackie.

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #5

  • Jackie
  • Jackie's Avatar
  • Offline
  • Platinum Member
  • Platinum Member
  • Posts: 4755

..I can't access the site access rules in the backend?


What do you mean by that? You can't see them?

Please Log in or Create an account to join the conversation.

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #6

  • fisharebest
  • fisharebest's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 14491
PS - you might want to wait until tomorrow. I plan to release 1.7.0, and the site-access-rules have been changed a little. You may find the new code works better for you.
Greg Roach - This email address is being protected from spambots. You need JavaScript enabled to view it. - fisharebest.webtrees.net

Please Log in or Create an account to join the conversation.

Hack? Tree setting "EXPAND_NOTES_DEFAULT" set to 0 5 years 9 months ago #7

  • Andreas
  • Andreas's Avatar Topic Author
  • Offline
  • Premium Member
  • Premium Member
  • Posts: 613
Thank you for assuring me that thes signs are harmless.

fisharebest wrote: PS - you might want to wait until tomorrow. I plan to release 1.7.0, and the site-access-rules have been changed a little. You may find the new code works better for you.


Today the site access rules were accessible ( sometimes :-( ).
I'll wait for the new release.
MAUPILLÉ & RAUHUT family using webtrees V2.0.11 & V1.7.17

Please Log in or Create an account to join the conversation.

  • Page:
  • 1
Powered by Kunena Forum