Thread: pconnect talk

They are trying to hack my site again

Webalizer:
http://www.zone-h.org/component/opti...cks/Itemid,43/
http://www.spyhackerz.com/forums.php

... few visits today!

I'm on Hostforweb now and register_global OFF (not admin-site)

I'm getting those error-messages (today 50 errors in inbox!):

Error in /member.php: Access denied for user 'nobody'@'localhost' (using password: NO)

Error in /index.php: Access denied for user 'nobody'@'localhost' (using password: NO)

Error in /profile_photos.php: Access denied for user 'nobody'@'localhost' (using password: NO)

...and every other pages!

Seems that they visit/crawl each page ... Every day I get more error messages. WHAT DO DO??

You sent me a PM with more information - and in there - the key problem appears to be your mysql server is running out of connections - then all hell breaks loose.

You may want to ask your host to turn off pconnect in php.ini - or you can mod your db.inc.php file to not use pconnect.

Smoge

I asked my host to disable it, but I'm on a shared server... so I do not know they are willing to do that.

I searched through db.inc.php and find this part

function connect()
{
if ( $this->connected )
return;
if (strlen($this->port)) $this->port = ":".$this->port;
if (strlen($this->sock)) $this->sock = ":".$this->sock;
$this->link = mysql_pconnect( $this->host . $this->port . $this->sock, $this->user, $this->passwd );
if ( $this->link )
$this->connected = TRUE;
else
$this->connected = FALSE;
}

How can I properly disable this function? I tried several things with no luck...

--> the answer I just get from hostforweb:

Does this software was developed for both versions of mysq_connect and mysql_pconnect? We have a limit max_user_connections=30 on the server. And I am not sure that I will be able to turn off mysql_pconnect via php.ini... I suppose that software should take care about this how to use mysql server.

thought you would be interested in this thread

Disable pconnect system wide

I already read that but it gives me no solution how to disable pconnect in the script itself db.inc.php...

Originally Posted by raeyo

I already read that but it gives me no solution how to disable pconnect in the script itself db.inc.php...

I added instructions for this to that thread:
Disable pconnect system wide

Smoge

I need to split this pconnect thread off of How To Turn Off Register Globals

The thread above is about register_globals

This thread you are looking at now is some talk about pconnect.

People are getting confused between pconnect and register_globals.

Smoge

The main problem I have found with pconnect is the host does NOT know how to set up correctly but once it's set up right it works great. However I made this little for loop in my pconnect section of db.inc.php to handle the problem until the host finally found and fixed their problem.

My moded version with Pconnect adding a for loop to retry conections.

PHP Code:

               for ( $i = 0; $i < 75; $i++ ) {
                     if ( !$this->link = @mysql_pconnect( $this->host . $this->port . $this->sock, $this->user, $this->passwd ) ) {
                          usleep(50000);  #Not available on windows before PHP 5.0
                     }else{
                          BREAK;
                     }
               }#[ END ] 1st for ( $i = 0; $i < DB_ATTEMPTS; $i++ ) 


To remove Pconnect use

PHP Code:

               for ( $i = 0; $i < 75; $i++ ) {
                     if ( !$this->link = @mysql_connect( $this->host . $this->port . $this->sock, $this->user, $this->passwd ) ) {
                          usleep(50000);  #Not available on windows before PHP 5.0
                     }else{
                          BREAK;
                     }
               }#[ END ] 1st for ( $i = 0; $i < DB_ATTEMPTS; $i++ ) 


Note I left the for loop in, this is because there are others on the same server and when their scripts go wild and hog connections I don't want to display an error until I've made at least 75 attempts to connect with a 50millisecond delay between attempts.

Pconnector works great! There is no reason to remove it, if you are having problems more than likely it's not with Pconnect it's the way your host has it set up which is not correct.

Pconnect reuses already open connections which is good and reduces connection resources.

If you disable pconnecat as above then you will need to modify each page and add the mysql_close to the bottom of every page in Aedating