search

michelem09 / wassup

WassUp Real Time Analytics for WordPress
https://www.wpwp.org
4 stars 4 forks source link

DB insert error #6

Open peepsnet opened 6 years ago

peepsnet commented 6 years ago

WordPress database error Unknown column 'i' in 'field list' for query INSERT DELAYED INTO wp_wassup (wassup_id, timestamp, ip, hostname, urlrequested, agent, referrer, search, searchpage, searchengine, os, browser, language, screen_res, spider, feed, username, comment_author, spam, url_wpid, subsite_id) VALUES ('0b_20f267aef3d6d19d0f88af3895bd66d0', 1512486283, '174.127.133.61', '174.127.133.61', '/wp-includes/js/',i,'', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)', '', '', 0, '', 'WinXP', 'IE 6', 'us', '', '', '', '', '', 3, 0, 0) made by require('wp-blog-header.php'), wp, WP->main, WP->send_headers, do_action_ref_array, WP_Hook->do_action, WP_Hook->apply_filters, wassupAppend, wassup_insert_rec, wassupDb::table_insert

wordpress 4.9.1, wassup Version 1.9.4.2

michelem09 commented 6 years ago

What Wassup version?

peepsnet commented 6 years ago

updated OP

hdunk commented 6 years ago

Thank you for reporting this. This record is from a script injection attempt (spam code=3) via the url that Wassup was not 100% successful in cleaning before the db insert, causing ( '/wp-includes/js/',i,'') in the url to be interpreted as extra table fields. I will look into fixing this.