I just found over 42,000 of these errors in admin System Error Log

[Claudia M]

File: [database.class.php] Line: [773] "SELECT * FROM CubeCart_coupons_backup_2019-01-30 LIMIT 50 OFFSET 1085650" - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-01-30 LIMIT 50 OFFSET 1085650' at line 1

What do I do about this?  I don't even use coupons.  At one time, long ago, I did use SemperFi's plugin.

I'm still running 6.2.9

Thanks in advance,

Claudia

[bsmither]

I am not aware of CubeCart being able to "archive" Promotional Codes.

Unfortunately, finding what is issuing that query will be rather involved.

We assume you have fully removed that plugin?

[Claudia M]

I didn't think they did either.  Yes I have fully removed the plugin.  Can I safely remove this database - CubeCart_coupons_backup_2019-01-30 and delete the entries?

Thanks

Claudia

[bsmither]

Can you determine when the latest of the query error entries were logged? Like, between two other errors that have dates on them?

If these query entries are really old, then we can assume the errors came from the plugin itself.

But, if some other CubeCart code is asking for access to CubeCart_coupons_backup_2019-01-30, then deleting that table will expose a related, but different error.

And, you can click the link to have CubeCart clear out the error logs with no repercussions.

 

[Claudia M]

They all occurred 0n 11-20-20 between 16:16 and 16:23

The only thing in my cPanel error log for close to that timeline is this:

 

[19-Nov-2020 16:00:23 America/Louisville] PHP Warning:  Invalid Security Token in /home/xxxx/public_html/classes/sanitize.class.php on line 155

 

[20-Nov-2020 05:30:17 America/Louisville] PHP Warning:  Stored session data did not match DB record. Session aborted as possible session hijack. Old IP Address: '92.38.148.53' New IP Address: '109.169.23.78' Old User Agent: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4315.5 Safari/537.36' New User Agent: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.11 Safari/537.36' in /home/xxxx/public_html/classes/session.class.php on line 719

 

[20-Nov-2020 13:32:48 America/Louisville] PHP Warning:  Invalid Security Token in /home/xxxx/public_html/classes/sanitize.class.php on line 155

 

[21-Nov-2020 10:38:24 America/Louisville] PHP Warning:  Stored session data did not match DB record. Session aborted as possible session hijack. Old IP Address: '2601:485:4200:7a00:d0af:bd7d:c420:3247' New IP Address: '2601:485:4200:7a00:3093:93b2:b94a:dc48' Old User Agent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0' New User Agent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0' in /home/xxxx/public_html/classes/session.class.php on line 719

 

I did find these that I have never seen before:

 

[30-Oct-2020 21:21:19 America/Louisville] PHP Warning:  Security Warning: Illegal array key "Rqddxo_dYcYbG2_nrfK_l7k/sGu42yS5fCFHOrlo1mWq66C9rm_7FVT4kIzot2/oQxXRTf6WioO/FjyQdVGdMpe996kJwZqyM18/kJlBnW3_u3fe/xMdoinu83D8GTjMBFABII6hB/K/bJDbz9Qgdzen1orOfNi7Ku2bAs6J9jKTqFA7NENNzq9G8xIWDCV09G58Z048rH6KxAnWnzCRm7pMHqc_iJyID71LLdVeO6/OE526mHTQjV1Hejfq1lhVjnshzXiHMLcBCpod3FTSApH0j6QfRkVNXutRcaok5K47C_BAOWhYAGL7hZVx7o57synvUfjj78ddEWwNzOHG6Rs1VL_Bkxghq0LznnTjXeA8eqNkuSWBr9APipfMvmM/_LIKb3QVYhVIrVR3DZi7u33Iuu8DABGx" was detected and was removed. in /home/xxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:23:20 America/Louisville] PHP Warning:  Security Warning: Illegal array key "R6BXxdzKYS_4oCXRMBC73uqtCpwHaZ3wGQmufrYLHbBWGLoPdeBdw1BS_vStMBLX_h7A4n7akzRKAG/uksgji_y41H0M6EIvoRMeiEgc1iqxEpxpGDk6P9ffP3jz1dS_JWkbqIBCWy5JOfoKVOV7ONFl8RtXDJy2uD7fCg0NcFqhhKFPQoYAN_EDFwONa_yX2DVgWEM3eSh9RTs8vbqfK0bIG9GGNZxdWHangnHVy5DsMUuyd4EGpPJL3BX6vvs2IEU7XnDMitgUihsn6AyfKdse/HgCMP2LxleLHyd21sbm02JIkJ6RZ0V8lo__aLKT1P/n6ZscG03ZGL2Lfw85Y2tNoSQ9AX2x/V1znEbctBtKCO_AELQKQr6WI6W6QbFd4l/zJFYCrA" was detected and was removed. in /home/xxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:25:21 America/Louisville] PHP Warning:  Security Warning: Illegal array key "RK1ckNzPZ37TP6insfzUQmejg2niucHQNQCMnxKjwCmuAN5ln/xHE_y6Gdy1uVUf2oFWjj7ENAOXXeZPPxaOUb7PbtDUqrS81K8ejJkiwxoepJZk1yzJRhRNR4vH4C1aULM6olEWu_vjejsy_oknu1GdhdxaYj3jasofi_J4vWx6Wno/h26b9EO1Pz05q9CoDF2/dJHr4SlTgVGGrDnmkRRtIqRvN_Wp4AU3l1v2p1MBgqDt/SnGCvq/F8_dJ18eFklJ3sFcmKaR2d2CQJ9tCq6OcsXzTuzqyE_i271gWGUZ5hoqpl5xO9u/SmSfMlvul/Hq4g9zma/YEslx1W5OFUtTsBAKN7Kcpcb/fpIXht9DXMJhN7LOjzABYN1K43QRAg" was detected and was removed. in /home/xxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:27:22 America/Louisville] PHP Warning:  Security Warning: Illegal array key "RfBbw96bMO7cao/6GUrBL4W2O1aETwit7XLqayU/IQwyGVMzdUtz3z9ilQX2qdduxRu_UJlA/FiMb/SysJTaL6kDXl5Lh1KLwQ2ZCRs2AcUgfoYDB0OqKrTmCcsnmAVmEobb/Lbs86r7wvCuWfGQt/FMSI9uaYwTP8nmdbxIe3LOGcLZMafaJ/ZvuG_IVf09LKWqwAjlg26YWuNMLazs2YmVxXUAqwEiP0SRsukIV8qi8RKvhO6aVProjUrTy2tKBLMdN8GM62czGLUuT33VRbIOdESh1wjK75C0QMS8XOi009xHXGWM2RblmgwpfEtxzVb8gMsfkY0uRkSfXH1zvDdazm7SLZ6IC9hEHzq74IqQ65gjVCMFZlXRUUtl2i_gE6GJJF57ZInxd2_SaaMLNDR6" was detected and was removed. in /home/xxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:29:23 America/Louisville] PHP Warning:  Security Warning: Illegal array key "FKwKl4jPMVO0t/p9IzV/oRBq3zVKyqffSVwoUgyXu7SeTYE5UpnPw_LBRY1DjtAI5UApDCrKMjU5R6KJg6xLmHfuX0D7ysU96MokMmtw3S9CHJbjU1m_Y8eWtuJfLaG8Eo_ZkYLlrfl5MHnVXzoZTXf4DFhVYI5tyOju0LMGWcPeUFo8Ft64M4MLmq8fwyEbr85/_58DAQL1KZImZiTLYhUnR5oJkVEtz4_K0p5wdO/mRHypsOY9lWjd7ld5D_IHH1t3d1BLn/6I95uFH3Y5UTXkfuYeg9J6aR77Jl8Y2S7nzq1kX84M476LQlvNCocu8sWWkSM5slHuvR6Yac/CAgRnUrvBtDN8" was detected and was removed. in /home/xxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:31:24 America/Louisville] PHP Warning:  Security Warning: Illegal array key "E/BXyN3AN0q9reYVfEsp8iqlvi4wKpsi1AVp9I5bGbtsf2jzKiYybR0Iy/G2tTuWmWS2ml_scDadRbYfWSlBuKtHf/e5zfapUNWB0TgDweBtbAATuqlJVsa1NmRmDwLjedFxssBnwd9XmY8ymVcHiYLH00eHp2VaR0RbRyUNGbEM6kwjmbQwCpkPibHe4yzJmJZHC9Bx_LCSv7qXHI9ekhq1oUT_VcbYPiAT/4RcBg9ljDU27NSEBrwWYB8kNg8OpueDL58_5J7NmlsdABB7RW2JlRnD89V4tlhJs2861HyrJHz7wyZGSvzxLwYEesDivN_vTwJq_KvitD9YkRog6EBTGieZvOlSPVVG5Yrcdge7_VOil0rylaiSArjkBq_4olAMAk42BCQH2D8SIn8vkG1YZd9_EircQsXHRV8nup7Tpoo" was detected and was removed. in /home/xxxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:33:25 America/Louisville] PHP Warning:  Security Warning: Illegal array key "F6MNwY7AZLLDYZUj5IDZ7FjrtuM4yvWRswBj/zkHnUi5/RiTnPTCN_Ybvt3xSLrN3suCD80JLUrGyKcvj1CPK8kdEWlJOmb7/ctTlzkY1g9w_6i_ub3IvepMc1mmzcw/Ih_2xi1c1Hk7HEWG17ZL6E6aZp8UFj36ae6E0yNoBDnW5OpYWcDxgn4Nzt76MfPj5nvGIPXfsSvSm7agv7gvUFqMXc2jl3POm2/yDJiku/E_shk7NhODogdIP0PMyiXAZik4GxUP2jsEe5u1GNZAppx1B63Uj__dH5yz8d_5iJvQeh0HGbMZoDzL12rDuM51xPT_sRTsX/gkD//bqy4HDiTJ9SinxiQQlS6i_LPjte08zT6RkjX0DR7JDZz0nJb3pi_6mAbgPQ" was detected and was removed. in /home/xxxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:35:26 America/Louisville] PHP Warning:  Security Warning: Illegal array key "R/NWx4jBZDRM1Wy4Pz44ZIC9nEGD7O3K89iWjG97UoG7Yj9WVmK4iYVA37OmlAbXboppLd9Am8lgqHRxzchjrj_TSE3HdskIZ9XFKuaKxEQMgQ5AMu1y_cMikrfRxsqtwHo5lj/su9VUhDv2LAEYaKTAFoIW138nldGvFzRDzBZ2JPKDn9mY8dBvAKdfE7WJQTQDP3ZUMLzmE9bnJfZq63x4Wssd0CIdHNrYH0zpdYGUtkiDLLLdWQvebt8S5rPk0DrBtckrNrrR/zaGFO_w0QOrZ/hwTeiFDyGM/uRACSMbEBncQnL4zEUSgeIolyEMB5yQE7MYh6kho8PNyOUdFs/hwIVhqJ3nDuymDt1H3E_XmqILzL3eDgPN3111CGnnOyhe5zLLKEbS8TvFeY8" was detected and was removed. in /home/xxxxxx/public_html/classes/sanitize.class.php on line 114

[30-Oct-2020 21:37:26 America/Louisville] PHP Warning:  Security Warning: Illegal array key "R60MlNqbbRztb0HVOmmDiNGxY6gRr5apSuYQHRmek5Kua2rXkokJWd2uqXEYFfkWyPnttgbNrZOfbYy94/Pkn1oTuf4L0mnjLGfX3ePdcDdflGWv_oZz5B7YDuhez9r_m/6/xODxl1ueqAzRB6fVcU_rNzCLRRlPuWms_015CekEEZzvNdmCmB9Li6g7ZWRhJ3jDnQ374abksign2mIZwV0TIhM2TFNtA5fChwgUby4zCs3nqQo5NgM/iVCwA6btbCRUUt_tLinCq1_Lla8aEkZZl2AzbUGta/yOh7E4vkFVC6Qe3d9NSDVo2sTZpqxdAOAgsRDp60st1x3WpzhAk4La41OnOciFB5oIFU6MZjTzXtEyIw7XUUkYiJc/GidRuaRaDUSZbQCCYpL8i__3dmIA" was detected and was removed. in /home/xxxxxx/public_html/classes/sanitize.class.php on line 114

[bsmither]

Wow. 42,000 is seven minutes!

Something got caught in a loop.

Don't worry about the errors you posted for Nov -- typical instances of visitors clicking the back button on the browser, and browsers getting updated while a session was still valid.

The illegal array keys could be world-wide cookies that some other website added to the visitor's browser to track them. By removing them, CubeCart is doing its thing.

So, if you confirmed that the SFWS module was removed, I will have to assume that somewhere, a bit of residue of it remains.

[Claudia M]

I'm in the process of removing all of SFWS mods and plugins.  When you say a bit of residue remains what do you mean?  After deleting the mods / plugins should I also go in and delete the databases they created?  I haven't been doing that.

[bsmither]

The database tables can stay. They won't cause any problems.

By 'residue', I mean if any module gave instruction to manually edit any core file (for example, because there was no hook available needed to do a task).

 

Also, please post what your File: [database.class.php] Line: [773] is. I show something very different.
 

 

[Claudia M]

Here you go:

$this->sqldumptable($file_name, $tableData, $dropTables, $incStructure, $incRows, $maxRows, $page);

[bsmither]

That's what I have, but this PHP statement does not resemble the query complained about by the database server.

However, line 225 in mysql.class.php, line 217 in mysqli.class.php, or perhaps even line 754 in database.class.php is what PHP could possibly report as being the faulty statement.

Anyway, we are in the "Backup the database" action.

I see two problems: the query being built at line 753 has $tableData['Name'] not enclosed in backticks, and somewhere there is an infinite loop created when the execution of the query fails. (The OFFSET implies the $page number ran up to 21713 - roughly half of your 42,000 error messages.)

The trigger for this situation is that the database table name contains dashes. The database server does not know if the table name is complete as given, or is part of a malformed mathematical equation. Thus, it is is imperative to always enclose table names and column names in backticks, or maintain awareness that table names must always use underscores -- never dashes.

So, I take back my comment about not bothering to delete unneeded tables. If the table name has a problem, other unrelated activities that access it will likely crash.

Go ahead and delete that SFWS table.

[Claudia M]

Will do Brian.  Thank you

[bsmither]

Did you actually look at the contents of the CubeCart_coupons_backup_2019-01-30 table?

If so, do you recall the count of the rows being nearly 22,000 or, perhaps, even more than a million rows?

 

[Claudia M]

Yes,  it had a row for ThankYou5, Thankyou10, and one other one I don't remember.  These were all coupons I had made with the SFWS plugin. 5% off, 10% off. That was it

[bsmither]

You are saying this table had only three rows?

 

[Claudia M]

I might be thinking of the actual coupon table because I just checked it has the 3 rows. Now that I think about it that table had people's names, etc. I don't think there was a million rows, I would have noticed that I think.