How do I fix this error?

[Gutspiller]

There seems to have been a slight problem with the database. Please try again by pressing the refresh button in your browser.

An E-Mail has been dispatched to our Technical Staff, who you can also contact if the problem persists.

We apologise for any inconvenience.


Database error in vBulletin Control Panel: Invalid SQL: SELECT COUNT(*) AS users FROM user,usergroup WHERE user.usergroupid=usergroup.usergroupid AND usergroup.cancontrolpanel=1 AND user.userid<>
mysql error: You have an error in your SQL syntax near '' at line 1
mysql error number: 1064
Date: Monday 23rd of December 2002 05:27:35 PM
Script: /forumz/admin/user.php
Referer: http://www.theforumz.com/forumz/admi...it&userid=1216

That's the error it gives. I need to fix it as it causes that error when I try to modify certain users profiles.

Please help.

[Xenon]

which vb version do you use?
it's a bug which was in vb before 226.
upload an unhacked user.php from 226 or above to solve it

[Gutspiller]

If my version is lower than 226 wont that mess stuff up?

[filburt1]

You should upgrade regardless because pre-2.2.9 versions have many XSS bugs.

BTW did you see your footer? It says ~180% MySQL and ~-80% PHP

[Xenon]

there is a bugfix in the vb.com announcement forum, but as filburt said, you should really upgrade, there are some security holes in versions befor 229

[Gutspiller]

I keep hearing people tell me to upgrade, but I don't understand how people can take hundreds of hours hacking their forum, to just throw it all away by updating and starting all over. Somebody really needs to make updating easier so you can keep your installed hacks. I have probably over 150 different hacks installed on my board and I don't have the time to litterally rebuild my site. Is anybody looking into this problem, or does everybody just ignore it?

Thanks for the help. I will check the vb announcement forum. If I have more questions though, I'll be back.

[Xenon]

look into my sig, there is a thread how to upgrade hacked boards

we all have the same problems as you have, but we have to handle it.
security first! It wouldn't be too hard for some of us to hack into your pre229 board if we'd plan to do so. It's really just for your best when you upgrade