I have been experiencing numerous attempts to bring down my site and attempts to insert php code into drupal

Example code:
Duplicate entry 'http://www.denmarkonline.dk/taxonomy/term/atom/atom/atom/atom/atom/atom/......' for key 1 query: INSERT INTO cache (cid, data, created, expire, headers) VALUES ('http://www.denmarkonline.dk/taxonomy/term/atom/atom/atom/atom/atom/atom/...', '�\0\0\0\0\0\0�=�v�8��9��a�I�I$��ﱔ�c;�亱��=�{t �h� \0e�Ͼ��K�>��>��c[�&Q�%\'=��L� (\0�B]PU��ã�/����1�0 >�9}A��m��za�G�G�__��}C�z��)��m���5T*޳�����e� �>�h_!���5���]�Z��0�=����k�Y$��k[.���^^B���嫀uN(wa�q\"G��Gj�� y��3xq��(�G$ I���!2��4�^D�#叙�o��C�(���/�?n[/\"�W��I�,�7���ؕ�q��HH�d���Am�\ "6@�Q��P��Ԭ]3�H��lSY�I��)ؾ� ��ӶE������H(b���ۮHbԱֳ}[��D YȤ-*��o�$�@�#��jFn0�k����!c�Z4=c;]�^�N.-����\0 i
/.....database.mysql.inc in line 66.

This caused the effect that adding new modules caused internal server error 500 with e.g.
standard profiles module
plus I have been unable to access menus.

Fixing it is easy.

If you get an internal 500 error remove the module you installed via ftp and simply switch cache support off for a short while and turn it back on again. Then all is back to normal. And upload the deleted module again.

I use register globals set to off and Drupal 4.6.3.

Comments

Uwe Hermann’s picture

Uwe Hermann commented
Assigned: Unassigned » Uwe Hermann
Priority: Critical » Normal
Status: Fixed » Active

The atom/atom/atom/... stuff is probably a bug in some search engine spider. Why are you thinking someone tries to insert PHP code into your Drupal installation?

Do you get a blank page? That probably means PHP ran out of memory. That's not a security issue and can be fixed by increasing PHP's memory limit...

FlemmingLeer’s picture

FlemmingLeer commented

is
INSERT INTO cache (cid, data, created, expire, headers) VALUES
normal ?

And no. It´s not a spider. It sometimes happens 60-80 within a minute.

Uwe Hermann’s picture

Uwe Hermann commented

The "INSERT INTO cache" is normal, I'm pretty sure. It's just your Drupal inserting stuff into its built in cache. What makes you think it's _not_ a spider? 60-80 times per minute sounds a _lot_ like a spider...

FlemmingLeer’s picture

FlemmingLeer commented

okay,

It think it isn´t .. :/

Could this bug affect this issue ?

http://drupal.org/node/34133

adding a new vocabulary brings down the site with internal 500 error.

And I tried adding more memory to the settings file. It´s still the same. :/

Uwe Hermann’s picture

Uwe Hermann commented
Status: Active » Fixed

Yes, you probably don't have enough memory. You probably need to set the PHP memory limit in your php.ini instead. If you're in a hosted environment, ask your hosting provider for help...

I think this issue if fixed, please reopen if you still think there's a security problem.

FlemmingLeer’s picture

FlemmingLeer commented

k,

Thank you for your input.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)