Bug Profile Error

[magmf]

I think there is a bug that happens in some users that I don't know the reason yet

example:

https://under-linux.org/member.php?u=67554

Database error in vBulletin 4.2.0:

Invalid SQL:

			SELECT
				entry.*,
				user.username,
				user.usergroupid,
				user.membergroupids,
				user.infractiongroupid,
				user.displaygroupid,
				receiveduser.username AS receivedusername,
				receiveduser.usergroupid AS receivedusergroupid,
				receiveduser.membergroupids AS receivedmembergroupids,
				receiveduser.infractiongroupid AS receivedinfractiongroupid,
				receiveduser.displaygroupid AS receiveddisplaygroupid
				
			FROM (
				()
			) AS entry
			LEFT JOIN vbuser AS user ON(user.userid = entry.userid)
			LEFT JOIN vbuser AS receiveduser ON(receiveduser.userid = entry.receiveduserid)
			ORDER BY entryid DESC
			LIMIT 20;

MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')
			) AS entry
			LEFT JOIN vbuser AS user ON(user.userid = entry.userid)
			LE' at line 15
Error Number  : 1064
Request Date  : Thursday, January 31st 2013 @ 12:14:44 PM
Error Date    : Thursday, January 31st 2013 @ 12:14:45 PM
Script        : http://under-linux.org/member.php?u=67554
Referrer      : 
IP Address    : 186.247.101.26
Username      : MarcusMaciel
Classname     : vB_Database
MySQL Version : 5.5.28-0ubuntu0.12.04.3

On what I could see the file responsible for this query is dbtech/thanks/includes/class_profileblock.php

 

[magmf]

So I did some debug and what is happening is...

For some reason

// Load union sql
$SQL = THANKS::loadUnionSql('profileblock');

is not getting any value for some users...

if ($_GET['compile']) {

print_r($SQL);

}


not working
https://under-linux.org/member.php?u=67554&compile=1

working
https://under-linux.org/member.php?u=21986&compile=1

 

[magmf]

Ok after a little bit more of debuging i figured that for some reason user id 67554

is not entering in any "if" of dbtech/thanks/includes/sql/profileblock.php

so that is the reason it has no $SQL

 

[magmf]

ok As a temporary workaround until you guys find a solution i commented

dbtech/thanks/includes/sql/profileblock.php

//if (count(self::$created['numEntries']['post']))
//{

and this fixed the problem.

can you help me in a correct fix for this issue ?

Thanks,

 

[Fillip H.]

What version of PHP are you running?

 

[magmf]

PHP 5.3.10-1ubuntu3.5 with Suhosin-Patch (cli) (built: Jan 18 2013 23:40:19)
Copyright (c) 1997-2012 The PHP Group

 

[magmf]

any news ? Thanks,

 

[Fillip H.]

Above the if condition you commented out, please try adding

vbstop(self::$created['numEntries']['post']);

and tell me the output.

 

[magmf]

Take a look...

profile not working
https://under-linux.org/member.php?u=67554&compile=1

profile working
https://under-linux.org/member.php?u=21986&compile=1

 

[Fillip H.]

That makes 0 sense...

Could you please create and PM me with a temporary FTP and AdminCP account?

For security reasons, we recommend you create a new FTP account only for DBTech support, then disable or delete it after we have both confirmed the issue has been solved and there are no further issues.

The same applies to AdminCP accounts; they should ideally be temporary accounts created for us only. If we have created an account on your site already, you can optionally boost that account to Administrator and then de-admin this account once the issue has been solved.

If you use a .htaccess password protection for your AdminCP directory, it is recommended that you create a new authorised user for DBTech and remove this user once the issue has been solved.

Please test any temporary accounts you create to ensure that the FTP account has access to the forum files, and that the AdminCP account can access the administrative controls for the product we are assisting you with.

Ensuring this is all in order before submitting the information will significantly speed up the process of assisting you. We will alert you via PM if there's any issues with the login information you have provided.

When sending the PM, for your security you should also un-tick the "Save a copy in my Sent Items folder" checkbox. When the access details have been received, we will delete the PM from our inbox. Ensuring you have not kept a copy of the PM reduces the risk of security breaches.

Thank you for helping us debug our products and allowing us to assist you, we appreciate it