On Tue, Mar 2, 2010 at 9:55 PM, unsolicited <span dir="ltr"><<a href="mailto:unsolicited@swiz.ca">unsolicited@swiz.ca</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Interestingly, given the thread, clicking on the link gives me access denied, as expected, but also another error.<br>
<br>
Access denied</blockquote><div><br>I see the access denied, which is normal since this is an /admin page.<br><br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
user warning: Table 'accesslog' is marked as crashed and should be repaired query: INSERT INTO accesslog (title, path, url, hostname, uid, sid, timer, timestamp) values('Regular Expressions', 'node/664', '', '<my ip address>', 0, '2c2034631a60a1d6715ac49c1378c9d8', 508, 1267540439) in /u2/home/kwlugor/public_html/includes/database.mysql.inc on line 172.<br>
</blockquote><div><br>I don't see this message.<br> <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
You are not authorized to access this page.<br>
<br>
Correct me if I'm wrong, and perhaps only once in syslog, but shouldn't throws like this be able to kick a notification e-mail off (if set up)?<br></blockquote><div> </div><div>In theory, anything that works off logs is possible. Be it email, pager, txt msg, ...etc.<br>
<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I get the noise level issue. But if such errors are thrown seldom enough that they were a surprise to Paul, perhaps it won't be too noisy? <br></blockquote><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
I guess the real question is, when thrown, how broken is the site / how quickly is a response/repair really needed? In our case. YMMV, I suppose.<br></blockquote><div><br>Depends on the table that is broken. In this case, the accesslog table contains just historical info used for "nice to have" features. But if it is a more crucial table, e.g. node or users, then things will be more broken than this.<br>
<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
FWIW, never seen such errors on the site, myself, before.<br></blockquote><div><br>The only time I see these errors is when the server is restarted and MySQL has no chance to write its buffers to disk or something like that. Can't tell if this is the case with that error or not. <br>
</div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
Khalid Baheyeldin wrote, On 03/02/2010 8:46 PM:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div class="h5">
On Tue, Mar 2, 2010 at 7:55 PM, Paul Nijjar <<a href="mailto:paul_nijjar@yahoo.ca" target="_blank">paul_nijjar@yahoo.ca</a> <mailto:<a href="mailto:paul_nijjar@yahoo.ca" target="_blank">paul_nijjar@yahoo.ca</a>>> wrote:<br>
<br>
On Tue, Mar 02, 2010 at 10:35:12AM -0500, Khalid Baheyeldin wrote:<br>
> Paul or someone with ssh access. Do this:<br>
><br>
> # mysql dbname<br>
> mysql > repair table accesslog;<br>
><br>
> That should fix this problem.<br>
<br>
I assume this output is okay?<br>
<br>
mysql> repair table accesslog;<br>
+---------------------------+--------+----------+------------------------------$<br>
| Table | Op | Msg_type | Msg_text $<br>
|<br>
+---------------------------+--------+----------+------------------------------$<br>
| db.accesslog | repair | warning | Number of rows changed<br>
from 500179 to 500184 |<br>
| db.accesslog | repair | status | OK $<br>
|<br>
+---------------------------+--------+----------+------------------------------$<br>
2 rows in set (41.84 sec)<br>
<br>
<br>
Yes. Table is repaired.<br>
<br>
Stupid question time: if errors are not verbose, then how will we know<br>
that they are happening? I log into the site about once a month. If I<br>
bother to look at<br>
<br>
<a href="http://kwlug.org/admin/logs/watchdog" target="_blank">http://kwlug.org/admin/logs/watchdog</a><br>
<br>
then I see the errors, but unless the site admins can somehow get<br>
notified<br>
when these bad things happen it's almost better if users see the errors<br>
and report them, no? Many eyes make shallow bugs and all that?<br>
<br>
<br>
Good question, and depends on how the site is managed.<br>
<br>
I don't think a message with a SQL error is a security risk per se. Annoying?<br>
Yes. Too much info? Yes. But it does not open any new holes.<br>
<br>
In this case, because no one checks daily, then it may be best to put it back<br>
to what it was, and hope some one sees it sooner, like what happened.<br>
<br>
Another thing you can do is install the watchdog patch from here<br>
<a href="http://drupal.org/node/149341" target="_blank">http://drupal.org/node/149341</a> which makes Drupal 5 behave like Drupal 6<br>
in logging. This means you can enable the syslog module and have all<br>
the watchdog stuff go to flat files, and then use your favorite log parser<br>
(tenshi, logwatch) or one of John V's regexps to filter the noise out and<br>
email you daily the odd stuff.<br>
-- <br>
Khalid M. Baheyeldin<br>
</div></div><a href="http://2bits.com" target="_blank">2bits.com</a> <<a href="http://2bits.com" target="_blank">http://2bits.com</a>>, Inc.<div class="im"><br>
<a href="http://2bits.com" target="_blank">http://2bits.com</a><br>
Drupal optimization, development, customization and consulting.<br>
Simplicity is prerequisite for reliability. -- Edsger W.Dijkstra<br>
Simplicity is the ultimate sophistication. -- Leonardo da Vinci<br>
<br>
<br></div>
------------------------------------------------------------------------<div class="im"><br>
<br>
_______________________________________________<br>
<a href="http://kwlug-disc_kwlug.org" target="_blank">kwlug-disc_kwlug.org</a> mailing list<br>
<a href="http://kwlug-disc_kwlug.org" target="_blank">kwlug-disc_kwlug.org</a>@<a href="http://kwlug.org" target="_blank">kwlug.org</a><br>
<a href="http://astoria.ccjclearline.com/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://astoria.ccjclearline.com/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
</div></blockquote><div><div></div><div class="h5">
<br>
_______________________________________________<br>
<a href="http://kwlug-disc_kwlug.org" target="_blank">kwlug-disc_kwlug.org</a> mailing list<br>
<a href="http://kwlug-disc_kwlug.org" target="_blank">kwlug-disc_kwlug.org</a>@<a href="http://kwlug.org" target="_blank">kwlug.org</a><br>
<a href="http://astoria.ccjclearline.com/mailman/listinfo/kwlug-disc_kwlug.org" target="_blank">http://astoria.ccjclearline.com/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Khalid M. Baheyeldin<br><a href="http://2bits.com">2bits.com</a>, Inc.<br><a href="http://2bits.com">http://2bits.com</a><br>Drupal optimization, development, customization and consulting.<br>
Simplicity is prerequisite for reliability. -- Edsger W.Dijkstra<br>Simplicity is the ultimate sophistication. -- Leonardo da Vinci<br>