random site errors- 200, etc. Nuke 7.6 patched

Posted: Thu Jul 09, 2009 1:01 pm

I was going to try to post this in the nuke 7.6 area, but it's locked...

I'm at my wits end- maybe I'm tired? I've done some searches on here, but struggled to find anything...

Basically, I've got Nuke 7.6 with chatserve's patches, Sentinel, Gallery, and a few other tweaks. A month or so back, someone wanted some detailed stats, so we coded the system to work with google analytics (was done using an extra file added to the "include" area....

Recently, more and more people, more and more often have been unable to get to the site. The error message is "check your dns/ host not found"- the hosts say the site gets itself stuck into a loop to do with error code 200 (I think- will check)- which should then throw up the dis errors module...

It doesn't. Diserrors never kicks in.

I've tried looking at my stats, tried looking at error messages; hosts nearly had a heart attack when they saw my .htaccess file....

First thing I did was remove the last coded added; though that would fix it, but didn't. No other files appear to have changed. (Looking through ftp clients at date/ times)
Still get the problem.

I even (when I managed to get onto the site!) disabled the site using Sentinel- the error was still being seen (but not as much)

We tweaked a few items, but nothing major. Only other thing to check is the chmod of the various files (anyone have a link to a quick reference guide for which files should be which chmod?)

I've not had time to look at this in anger. I'm thinking, push comes to chove, I'll have to take it offline, back it up, then attempt to upgrade to RN (hell, I've been whittering on about it for enough years!)- if so, which version, and is there a "how to" for this? I need to keep things "as they are"- I can sort themes out (just change the name of the default them in RN to my current theme, if needbe)
Things I use, apart from Nuke (and now I'm really thinking about it) and sentinel:
Gallery 1.x (I helped on the coding to get it to work with Sentinel, then again when it was upgraded- move to RN shouldn't be too difficult.. ?!)
Dis errors
legal docs
donation block
amazon block
cafepress block
news pagination (that could be tricky, unless RN has one?)

The DB is... HUGE...... and the site is kicking around 3Gb, so the less painless, the better. If I could just fix the issues now, great. If I have to do a full blown upgrade, then so be it....

php version is 5. something (again, can check)- as mentioned, hosts claim nothing has changed "their end"- although I've known "oversights" before to knock the site sideways.....

Any help/ comments appreciated...

registered · Posted: Thu Jul 09, 2009 9:19 pm

I would say, start with your PHP error logs. See if there's anything in there that is stopping the script from processing. If not that, I expect your server probably cannot handle the load of connections.

Posted: Fri Jul 10, 2009 8:03 am

error 500 (not 200);

site isn't getting that much bandwidth/ page requests (we've seen it handle 30k pages per day no problem)

Where can I find the php errors? I've looked at the error log file in cpanel/ via ftp from the server- I get the "header cannot be sent already sent" message- something I spotted last night and I think is fairly common (I'll do a search later for it)

I'm hoping the hosts have a back up so I can check the core files haven't changed/ roll back if necessary....

Posted: Fri Jul 10, 2009 8:59 am

AndyB wrote:

I get the "header cannot be sent already sent" message- something I spotted last night and I think is fairly common (I'll do a search later for it)

What file is it referring to?

This usually happens when a text editor adds its own header information to the file.

If you know the file name, open it up with notepad or notepad++ remove the jibberish at the start of the file and re-save/re-upload it.

Posted: Fri Jul 10, 2009 10:01 am

I'll check; I tend to use editpad lite for stuff like this- it doesn't throw anything "additional" in....

[08-May-2009 13:21:40] PHP Warning: Cannot modify header information - headers already sent by (output started at /home/xxxxx/public_html/header.php:32) in /home/xxxxx/public_html/includes/page_header.php on line 499

It's not the only file with this in the error log; I get it with quite a few other files...;

page_header
sessions
modules/Forums/viewtopic.php
modules/Forums/posting.php

etc.

The problem I've got- predominantly- is not actually being able to get onto the site.... and this appears to be totally random...

Posted: Fri Jul 10, 2009 2:09 pm

mm error 500 , often is related to .htaccess
the first time i clicked the www button it wanted to goto audifans, i used FF , it gave me a server not found.
when i refreshed, your site popped up.
I dont now if you using sentinel with the htaccess protection/login for your admin.
Ifso.. turn it of and delete the .htaccess , .ftaccess and .staccess

if i am correct cpanel wiull create a new .htaccess , that one you can keep

Posted: Fri Jul 10, 2009 4:10 pm

but there's stuff in .htaccess (blocked IP's we've banned on purpose, etc.) that we could do with keeping....

what chmod should .htaccess be? Could the file be too big?

Posted: Fri Jul 10, 2009 4:13 pm

define big?

Posted: Fri Jul 10, 2009 4:15 pm

321kb; 13,741 lines....

Posted: Fri Jul 10, 2009 4:20 pm

that is pretty big i think , however i give the others a shot.
I'm not so sentinel (shouldnt be needed in first place).
But is it really needed to directly block ip's , even if attempt to do a hack.. let them.
you should also trust the original code and dont get paranoïd.
Do a weekly back up of your site when remove the .htacess etc etc store these files aswell somewhere on your desktop PC and give it a try.

if all your problems really comming from the .htaccess file(s) , the only solution would be to make a index page and is loaded , and when loaded let it read the .htaccess blocked ip's.
if granted.. redirect to your default website.

I only give you a solution.. dont ask me how to

Posted: Sat Jul 11, 2009 2:40 am

I've tried a cut down version of the file; details below:

Code:

ErrorDocument 400 http://www.domain.net/modules.php?name=DisError&file=index&func=error400


ErrorDocument 401 http://www.domain.net/modules.php?name=DisError&file=index&func=error401


ErrorDocument 403 http://www.domain.net/modules.php?name=DisError&file=index&func=error403


ErrorDocument 404 http://www.domain.net/modules.php?name=DisError&file=index&func=error404


ErrorDocument 405 http://www.domain.net/modules.php?name=DisError&file=index&func=error405


ErrorDocument 406 http://www.domain.net/modules.php?name=DisError&file=index&func=error406


ErrorDocument 408 http://www.domain.net/modules.php?name=DisError&file=index&func=error408


ErrorDocument 410 http://www.domain.net/modules.php?name=DisError&file=index&func=error410


ErrorDocument 411 http://www.domain.net/modules.php?name=DisError&file=index&func=error411


ErrorDocument 414 http://www.domain.net/modules.php?name=DisError&file=index&func=error414


ErrorDocument 500 http://www.domain.net/modules.php?name=DisError&file=index&func=error500


ErrorDocument 503 http://www.domain.net/modules.php?name=DisError&file=index&func=error503





#Check for Santy Worms and redirect them to a fake page


RewriteCond %{HTTP_USER_AGENT} ^LWP                   [NC,OR]


RewriteCond %{REQUEST_URI} ^visualcoders              [NC,OR]


RewriteCond %{QUERY_STRING} rush=([^&]+)              [NC,OR]


RewriteCond %{REQUEST_URI} ^envidiosos                [NC,OR]


RewriteCond %{REQUEST_URI} ^civa                      [NC,OR]


#variant-6 redirect all inner http:// request


RewriteCond %{QUERY_STRING} ^(.*)http://(.*)            [NC,OR]


#variant-7 redirect all inner http request regardless if encoded


RewriteCond %{QUERY_STRING} ^(.*)http%3A%2F%2F(.*)      [NC]


RewriteRule ^.*$ http://WHERE_EVER.com [R,L]





Options All -Indexes


DirectoryIndex index.php index.htm index.html 


# -------------------------------------------


# Start of NukeSentinel(tm) admin.php Auth


# -------------------------------------------


#<Files .ftaccess>


#  deny from all


#</Files>


#


#<Files .staccess>


#  deny from all


#</Files>


#


#<Files admin.php>


#   <Limit GET POST PUT>


#      require valid-user


#   </Limit>


#   AuthName "Restricted"


#   AuthType Basic


#   AuthUserFile /path/to/your/.staccess


#</Files>


#


# -------------------------------------------


# Start of NukeSentinel(tm) DENY FROM area


# ------------------------------------------- 


deny from 85.140.150.250


deny from 193.242.119.150


deny from 201.229.208.3

I actually removed ALL the IP addresses; I'm still getting the same problem.

Posted: Sat Jul 11, 2009 3:04 am

I looked at the source code and don't see anything major other than;
1 you are using the stylesheet from the DeepBlue theme and not your default Charcoal2 one
2 - you have a lot external code being pulled in (affiliates/ads etc).

500 error is, as already mentioned, normally due to htaccess problems. I would definitely register with one of the free site monitoring services like SiteUpTime as I cannot shake this feeling that there is more going on here, like possibly the host server falling over.

Posted: Sat Jul 11, 2009 3:10 am

I'd agree, but it would be liekly to be the DNS, not the site itself- I'm connected via FTP using the ip address/ server name as opposed to dns name...

What should the chmod be on the main files?

Posted: Sat Jul 11, 2009 3:21 am

I have not used phpNuke for such a long time I don't remember but your cPanel error log should highlight any problems.
I just checked your DNS and you definitely want to put a ticket in with your host as there are some things that need fixing;
There is no A record for WWW

You have 4 nameservers listed for your sites IP address but none of them are listed at the parent nameserver

Two of the parent nameservers are not listed in the NS (nameserver) records.

Posted: Sat Jul 11, 2009 3:24 am

Sent you a PM

Posted: Sat Jul 11, 2009 3:36 am

thanks for this- mail fired over to them, replied to your pm Wink