urgent help ! receiving spam search and loosing resource

[Aficionado]

Ah, that explains why I didn't see it. Afficionado. again, sorry for the doubt

Not removed, it is everywhere in categories for example. But for some reason URLS don't show at all in browser. What the website owner has done to Osclass code is unbelievable.

[mandi007]

Ah, that explains why I didn't see it. Afficionado. again, sorry for the doubt

Not removed, it is everywhere in categories for example. But for some reason URLS don't show at all in browser. What the website owner has done to Osclass code is unbelievable.

i am a newbie 

[mandi007]

i also removed it .........it may be still showing because of the cache....

[dev101]

in my access_log i cant find any url related to it and also in error_log.......please point me where should i check

There must be! (your access_log is what you need)
Filter out all the lines that contain /search/ url part.

Also, ask your hosting support for older logs, if they have them, last 24 hours might not be enough (e.g. if that happened earlier).
But, from your last post, it still happens?

Ah, that explains why I didn't see it. Afficionado. again, sorry for the doubt

Not removed, it is everywhere in categories for example. But for some reason URLS don't show at all in browser. What the website owner has done to Osclass code is unbelievable.

Please, give me some url example. Still, as strange it may sound, author was clever enough* to 'convert' that php single lines into html comments, so by doing that it did not actually broke his site

[Aficionado]

Please, give me some url example. Still, as strange it may sound, author was clever enough to 'convert' that php single lines into html comments, so by doing that it did not actually broke his site

Go to the website main page. Do you see URL LINKS to Categories ? I don't. But anyway click to one Category and see the html code.

Also i tried to post an ad and i was rejected by some GeoBlock. Sorry, but i still believe this is not search problem.

[mandi007]

i have all the logs....will search like u said and get back in 5 min

[Aficionado]

@Mandy have you enabled Debug to a LOG ?

I'm pretty sure it will contain a lot.

[Aficionado]

i have all the logs....will search like u said and get back in 5 min

Why don't you follow what dev101 said. REMOVE CLOUDFLARE. You didn't.

IP address   104.27.180.145
Registry   US - California - San Francisco - 101 Townsend Street - Cloudflare, Inc.
Network Range   104.16.0.0 - 104.31.255.255
Network Name   CLOUDFLARENET

[dev101]

Sorry have to leave for a while. Do what we told you and report what you have find.

[mandi007]

i have all the logs....will search like u said and get back in 5 min

Why don't you follow what dev101 said. REMOVE CLOUDFLARE. You didn't.

IP address   104.27.180.145
Registry   US - California - San Francisco - 101 Townsend Street - Cloudflare, Inc.
Network Range   104.16.0.0 - 104.31.255.255
Network Name   CLOUDFLARENET

why you want to remove the cloudflare........i dont understand this point

[mandi007]

the log shows all the url like

my server ip - - [07/Jan/2018:03:58:34 -0600] "GET /search/sOrder,dt_pub_date/iOrderType,desc/pattern,XVcijpTCAYYi/sPriceMin,5/sPriceMax,21 HTTP/1.0" 200 93585 "http://tuni.mydomain.in/jobs/arts-design-entertainment" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

but here i cant find the ip from were it is being searched

how to enable the debug option

[Aficionado]

the log shows all the url like

my server ip - - [07/Jan/2018:03:58:34 -0600] "GET /search/sOrder,dt_pub_date/iOrderType,desc/pattern,XVcijpTCAYYi/sPriceMin,5/sPriceMax,21 HTTP/1.0" 200 93585 "http://tuni.mydomain.in/jobs/arts-design-entertainment" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

but here i cant find the ip from were it is being searched

how to enable the debug option

So you are saying the the SEARCH IP is coming from are your own ?

As for debug

https://doc.osclass.org/Debug_PHP_errors

just be sure to ENABLE IT TO A LOG FILE and not to the screen.

[Aficionado]

why you want to remove the cloudflare........i dont understand this point

dev101 told you why:

Hmm, that is interesting. You use CloudFlare, now I don't wish to speculate much without seeing your logs first, but can you completely bypass CF for a while and see if it happens again?

[mandi007]

ok i will disable the cloud ...........i have not seen that......i enabled the developer mode....is that enough...
so it will bypass cloud as of now....


adding this in config is enough or i have to modify


define('OSC_DEBUG_LOG', true) ;

[Aficionado]

ok i will disable the cloud ...........i have not seen that......i enabled the developer mode....is that enough...
so it will bypass cloud as of now....


adding this in config is enough or i have to modify


define('OSC_DEBUG_LOG', true) ;

Code: [Select]

define('OSC_DEBUG', true) ;
define('OSC_DEBUG_LOG', true) ;