logo       

Re: Nasty "bug": msg#00035

Subject: Re: Nasty "bug"
On Thu, Apr 24, 2003 at 05:13:17PM +1000, Lars wrote:
> Hey, all!
> 
> I just went through something that seemed particularly nasty to me, and it 
> caused my site to go down for almost 24 hours. The fault looked like it was 
> caused by a dead httpd, but when I tried to reconstruct my site on a fresh 
> install I found the culprit - my rss feed, which I display on my own site 
> (only for logged in root users) made all pages with blocks on them 
> inaccessible to *all* users. This, however, was not apparent until I found 
> the problem.
> 
> The following error in the logs (Error in source file:rdfparser::parse_file 
> could not open http://www.pda-nytt.no/backend.php3?d=0 ) lead me in the 
> right direction. For some reason it's all over my logs, so it cannot be a 
> "new" problem.
>
> This leads me to the following questions:
> 1. How can a problem like this be allowed to crash a whole site ?

The error condition was being logged for a period of time before the crash.  
Did 
the crash happen because the infolog table was full?

The rss blocks have three states for error logging specified by the error 
option:

errors = on  - always display errors
         off - never display errors
         debug - only display errors in debug mode [default]

For all three the infolog is written if you have the Infolog turned on.

> 2. Why are blocks rendered even for users who shouldn't see them ? Isn't 
> this a security breach and/or too resource intensive ?
> 

No security problem as it's all server side before output rendering.  It is a 
balance between ease of site specific changes and db optimization.  If there is 
anywhere you see we could improve the queries or data setup, speak up.

Was there no cache time for this block?  This would seem a performance 
bottleneck too.

> It was only last night (after the crash) backend.php (I rewrite the url's 
> so php3 -> php) stopped giving output, and this error seems to have 
> occurred plenty before then.
> 

what fun.

Joe

> If one of the developers wants the db dump from my site I'd be more than 
> happy to give it out (I'll change my pwd's, though;o)
> 
> Cheers,
> 
> Lars 
> 


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf


<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

Recently Viewed:
linux.arklinux....    user-groups.lin...    kde.usability/2...    ietf.ipp/2002-0...    mail.spam.spamc...    os.netbsd.devel...    audio.cd-record...    text.unicode.de...    php.documentati...    games.fps.halfl...    window-managers...    suse.oracle.gen...    bug-tracking.gn...    video.dvdrip.us...    xfree86.cvs/200...    java.netbeans.m...    network.argus/2...    culture.sf.kill...    debian.ports.al...    freebsd.questio...    qplus.devel/200...    handhelds.palm....   
Home | blog view | USPTO Patent Archive | advertise | OSDir is an inevitable website. super tiny logo

Free Magazines

Cisco News
Receive a free quarterly e-newsletter with exclusive articles on how Cisco IT uses its own products and solutions to enable the business.
subscribe

Systems Management News, the newspaper for IT systems administration and data center managers! Each issue of Systems Management News is chock-full of news and analysis to help you understand what's happening in your field.
subscribe

The Enterprise Newsweekly eWeek is the essential technology information source for builders of e-business.
subscribe

Oracle Magazine Oracle Magazine contains technology strategy articles, sample code, tips, Oracle and partner news, how to articles for developers and DBAs, and more. Oracle (NASDAQ: ORCL) is the world's largest enterprise software company.
subscribe

Total Telecom Total Telecom is "The Economist of the communications industry".
subscribe