Last modified: 2010-05-15 15:41:08 UTC
Excuse me in advance for panicing. I'm Marc Perkel, I have a small one server hosting company, Computer Tyme Hosting. I have several customers including myself that use Mediawiki. For some reason and I don't know what but ALL if the mediawikis (about 6 or so) stopped working with several database errors. I am not sure what happened but it looks like they all have been hacked. I don't know any other way to contact developers about some possible security hole, so I'm doing it this way. Thee is a possibility that this is something that I don't understand. I run a lot of databases but only the Mediawikis were affected. The latest version of Mediawiki I have is 1.71 which means they are all that old or older. I still freaking out - (excuse me) - so please take that into account in case it turns out to be something stupid I did. Here are some of the sites and errors I'm getting. http://www.churchofreality.org/wiki/ Error in fetchObject(): Table 'cor-wiki.page' doesn't exist Backtrace: * GlobalFunctions.php line 451 calls wfBacktrace() * Database.php line 531 calls wfDebugDieBacktrace() * MessageCache.php line 151 calls Database::fetchObject() * MessageCache.php line 94 calls MessageCache::loadFromDB() * MessageCache.php line 247 calls MessageCache::load() * GlobalFunctions.php line 342 calls MessageCache::get() * GlobalFunctions.php line 322 calls wfMsgGetKey() * GlobalFunctions.php line 297 calls wfMsgReal() * OutputPage.php line 657 calls wfMsgNoDB() * Database.php line 411 calls OutputPage::databaseError() * Database.php line 358 calls Database::reportQueryError() * BagOStuff.php line 382 calls Database::query() * BagOStuff.php line 279 calls MediaWikiBagOStuff::_doquery() * BagOStuff.php line 228 calls SqlBagOStuff::_query() * MessageCache.php line 83 calls SqlBagOStuff::get() * MessageCache.php line 247 calls MessageCache::load() * GlobalFunctions.php line 342 calls MessageCache::get() * GlobalFunctions.php line 322 calls wfMsgGetKey() * GlobalFunctions.php line 288 calls wfMsgReal() * index.php line 77 calls wfMsgForContent() http://wiki.ctyme.com/ Database error A database error has occurred Query: SELECT ug_group FROM `user_groups` WHERE ug_user = '1' Function: User::loadFromDatabase Error: 1146 Table 'ctyme-wiki.user_groups' doesn't exist (localhost) http://crankshaftcoalition.com/wiki/ MediaWiki internal error. Original exception: exception 'DBQueryError' with message 'A database error has occurred Query: SELECT value,exptime FROM `objectcache` WHERE keyname='ccwiki:messages-hash' Function: MediaWikiBagOStuff::_doquery Error: 1146 Table 'ccwiki.objectcache' doesn't exist (localhost) ' in /www/crankshaftcoalition/wiki/includes/Database.php:708 Stack trace: #0 /www/crankshaftcoalition/wiki/includes/Database.php(665): Database->reportQueryError('Table 'ccwiki.o...', 1146, 'SELECT value,ex...', 'MediaWikiBagOSt...', false) #1 /www/crankshaftcoalition/wiki/includes/BagOStuff.php(396): Database->query('SELECT value,ex...', 'MediaWikiBagOSt...') #2 /www/crankshaftcoalition/wiki/includes/BagOStuff.php(296): MediaWikiBagOStuff->_doquery('SELECT value,ex...') #3 /www/crankshaftcoalition/wiki/includes/BagOStuff.php(236): SqlBagOStuff->_query('SELECT value,ex...', 'ccwiki:messages...') #4 /www/crankshaftcoalition/wiki/includes/MessageCache.php(206): SqlBagOStuff->get('ccwiki:messages...') #5 /www/crankshaftcoalition/wiki/includes/MessageCache.php(442): MessageCache->load() #6 /www/crankshaftcoalition/wiki/includes/GlobalFunctions.php(420): MessageCache->get('mainpage', true, true) #7 /www/crankshaftcoalition/wiki/includes/GlobalFunctions.php(379): wfMsgGetKey('mainpage', true, true, true) #8 /www/crankshaftcoalition/wiki/includes/GlobalFunctions.php(328): wfMsgReal('mainpage', Array, true, true) #9 /www/crankshaftcoalition/wiki/includes/Title.php(275): wfMsgForContent('mainpage') #10 /www/crankshaftcoalition/wiki/includes/Wiki.php(74): Title::newMainPage() #11 /www/crankshaftcoalition/wiki/index.php(17): MediaWiki->checkInitialQueries(NULL, 'view', Object(StubObject), Object(WebRequest), Object(StubContLang)) #12 {main} Exception caught inside exception handler: exception 'DBUnexpectedError' with message 'Error in fetchObject(): Table 'ccwiki.page' doesn't exist (localhost)' in /www/crankshaftcoalition/wiki/includes/Database.php:825 Stack trace: #0 /www/crankshaftcoalition/wiki/includes/MessageCache.php(315): Database->fetchObject(false) #1 /www/crankshaftcoalition/wiki/includes/MessageCache.php(252): MessageCache->loadFromDB() #2 /www/crankshaftcoalition/wiki/includes/MessageCache.php(442): MessageCache->load() #3 /www/crankshaftcoalition/wiki/includes/GlobalFunctions.php(420): MessageCache->get('databaseerror', true, false) #4 /www/crankshaftcoalition/wiki/includes/GlobalFunctions.php(379): wfMsgGetKey('databaseerror', true, false, true) #5 /www/crankshaftcoalition/wiki/includes/Exception.php(18): wfMsgReal('databaseerror', Array) #6 /www/crankshaftcoalition/wiki/includes/Database.php(212): MWException->msg('databaseerror', 'Database error') #7 /www/crankshaftcoalition/wiki/includes/Exception.php(109): DBQueryError->getPageTitle() #8 /www/crankshaftcoalition/wiki/includes/Exception.php(76): MWException->htmlHeader() #9 /www/crankshaftcoalition/wiki/includes/Exception.php(95): MWException->reportHTML() #10 /www/crankshaftcoalition/wiki/includes/Exception.php(171): MWException->report() #11 /www/crankshaftcoalition/wiki/includes/Exception.php(205): wfReportException(Object(DBQueryError)) #12 [internal function]: wfExceptionHandler(Object(DBQueryError)) #13 {main} Larry Lessig's Wiki (of Creative Commons) http://www.lessig.org/mediawiki/ Error in fetchObject(): Table 'lessig-wiki.page' doesn't exist Backtrace: * GlobalFunctions.php line 451 calls wfBacktrace() * Database.php line 531 calls wfDebugDieBacktrace() * MessageCache.php line 151 calls Database::fetchObject() * MessageCache.php line 94 calls MessageCache::loadFromDB() * MessageCache.php line 247 calls MessageCache::load() * GlobalFunctions.php line 342 calls MessageCache::get() * GlobalFunctions.php line 322 calls wfMsgGetKey() * GlobalFunctions.php line 297 calls wfMsgReal() * OutputPage.php line 657 calls wfMsgNoDB() * Database.php line 411 calls OutputPage::databaseError() * Database.php line 358 calls Database::reportQueryError() * BagOStuff.php line 382 calls Database::query() * BagOStuff.php line 279 calls MediaWikiBagOStuff::_doquery() * BagOStuff.php line 228 calls SqlBagOStuff::_query() * MessageCache.php line 83 calls SqlBagOStuff::get() * MessageCache.php line 247 calls MessageCache::load() * GlobalFunctions.php line 342 calls MessageCache::get() * GlobalFunctions.php line 322 calls wfMsgGetKey() * GlobalFunctions.php line 288 calls wfMsgReal() * index.php line 77 calls wfMsgForContent() I could use some help.
Usually this means you've got some catastrophic breakage such as: * Tables were InnoDB, but MySQL was upgraded or recognfigured in a way that disables InnoDB * Table files were not copied when moving or backing up/restoring servers * Your database broke fundamentally or was replaced
There are probably cross-site scripting vulnerabilities in MediaWiki 1.7.1, and it would be wise to upgrade to the latest version, 1.10.0 (or wait a week or two for 1.11.0). There are no known vulnerabilities in it that would permit the table to be dropped or destroyed, and it's exceptionally unlikely that there are any unknown vulnerabilities that would allow that (since we use wrapper functions for SQL and never touch eval()). Most likely, however, there was some system error caused by operator error or bad luck, with no hacking involved. In any case the error is on the database end and has nothing to do with MediaWiki.
Never mind. I found the problem. It was a corrupt ibdata1 file. It just affected the wikis more that other applications. I'm sorry that I paniced everyone but this was the result I was hoping for. So - NOT a bug!
